You are on page 1of 503

12:31:47 - --------------------------------------------------------------------12:31:47 - Advanced EFS Data Recovery 3.0 / ElcomSoft Co.Ltd. [www.elcomsoft.

com
]
12:31:47 - Registered version
12:31:47 - DEBUG MODE
12:31:47 - --------------------------------------------------------------------12:31:47 - System information:
12:31:47 Current date/time: 15.09.2011 12:31:47
12:31:47 Windows version: Microsoft Windows XP Professional Service Pack
3 (free build 2600)
12:31:47 Windows language: Spanish (Spain, Modern Sort)
12:31:47 Computer name: SERVIDOR
12:31:47 User name: SERVIDOR\1
12:31:47 Memory load: 50%
12:31:47 Total size of physical memory: 535.609.344
12:31:47 Available size of physical memory: 265.441.280
12:31:47 Total size of page file: 905.322.496
12:31:47 Available size of page file: 653.185.024
12:31:47 Windows folder: C:\WINDOWS
12:31:47 Application data folder: C:\Documents and Settings\1\Datos de pr
ograma
12:31:47 - --------------------------------------------------------------------12:31:47 - Opening logical disk C:
12:31:47 sector_size = 512
12:31:47 cluster_size = 4.096
12:31:47 mft_lcn = 0xc0000
12:31:47 mft_entry_size = 1.024
12:31:47 index_entry_size = 4.096
12:31:47 disk_size = 20.982.656.512
12:31:47 - Closing logical disk C:
12:31:47 - In GetAutoLogonPassword...
12:31:47 key = 0xac
12:31:47 in ReadSecret...
12:31:47 in InitLSAFunctions...
12:31:47 Before loading:
12:31:47 myLsaOpenPolicy = 0x0
12:31:47 myLsaRetrievePrivateData = 0x0
12:31:47 myLsaClose = 0x0
12:31:47 myLsaFreeMemory = 0x0
12:31:47 myLsaStorePrivateData = 0x0
12:31:47 myLsaNtStatusToWinError = 0x0
12:31:47 myLsaAddAccountRights = 0x0
12:31:47 myLsaRemoveAccountRights = 0x0
12:31:47 myLsaEnumerateAccountRights = 0x0
12:31:47 myLsaQueryInformationPolicy = 0x0
12:31:47 myLsaSetInformationPolicy = 0x0
12:31:47 After loading:
12:31:47 myLsaOpenPolicy = 0x77db1e17
12:31:47 myLsaRetrievePrivateData = 0x77dbde7e
12:31:47 myLsaClose = 0x77db1ee4
12:31:47 myLsaFreeMemory = 0x77db2dbe
12:31:47 myLsaStorePrivateData = 0x77dcd00f
12:31:47 myLsaNtStatusToWinError = 0x77dbdffb
12:31:47 myLsaAddAccountRights = 0x77deabc9
12:31:47 myLsaRemoveAccountRights = 0x77deac69
12:31:47 myLsaEnumerateAccountRights = 0x77db608f
12:31:47 myLsaQueryInformationPolicy = 0x77db2de7

12:31:47 myLsaSetInformationPolicy = 0x77deaf81


12:31:47 szSecret = 'DefaultPassword'
12:31:47 MultiByteToWideChar. rc = 0x10
12:31:47 wszSecret = 'DefaultPassword'
12:31:47 myLsaOpenPolicy. status = 0x0
12:31:47 pol = 0x1615b8
12:31:47 dwLength = 0xf
12:31:47 myLsaRetrievePrivateData. status = 0xc0000034
12:31:47 pol = 0x1615b8
12:31:47 secret = 0x0
12:31:47 type = 0x4, cnt = 0x0
12:31:47 RegQueryValueEx. rc = 0x2
12:31:47 ALPasswd = ''
12:31:47 - AEFSDR Wizard started
12:31:51 - Starting scan of logical disk C: to find EFS related data
12:31:51 Opening logical disk C:
12:31:51 sector_size = 512
12:31:51 cluster_size = 4.096
12:31:51 mft_lcn = 0xc0000
12:31:51 mft_entry_size = 1.024
12:31:51 index_entry_size = 4.096
12:31:51 disk_size = 20.982.656.512
12:31:51 Scanning NTFS logical disk C
12:31:51 Opening $MFT file.
12:31:51 mft_size = 12d10
12:31:51 CEFSContainer::ProcessNTFSDisk: number of MFT entries to
scan - 12d10
12:31:51 Reading MFT entry. number = 0, mft_size = 12d10
12:31:51 data_offset = 0, data_size = 400, file_size = 4b
44000
12:31:51 cache = 0, cache_offset = 0, cache_size = 0
12:31:51 WriteFileDataIntoMemory: Initializing run list
12:31:51 pA->flags = 0
12:31:51 pA->non_resident = 1
12:31:51 pA->name_offset = 40, pA->name_length =
0, pA->data_size = 4b44000
12:31:51 Appending run list
12:31:51 *runs = 0, runs_qnt = 0
12:31:51 Quantity of runs in list = 3
12:31:51 Run list successfully appended
12:31:51 data_runs = c58f60, data_runs_qnt = 4
12:31:51 run_cl_qnt = 3dec, clusters_to_read = 1, bytes_i
n_cluster = 1000, start_cl = c0000, file_offs = 0, d_offs = 0
12:31:52 Reading MFT entry. number = 1, mft_size = 12d10
12:31:52 data_offset = 400, data_size = 400, file_size =
4b44000
12:31:52 cache = 1550020, cache_offset = 0, cache_size =
400000
12:31:52 Reading MFT entry. number = 2, mft_size = 12d10
12:31:52 data_offset = 800, data_size = 400, file_size =
4b44000
12:31:52 cache = 1550020, cache_offset = 0, cache_size =
400000
12:31:52 Reading MFT entry. number = 3, mft_size = 12d10
12:31:52 data_offset = c00, data_size = 400, file_size =
4b44000
12:31:52 cache = 1550020, cache_offset = 0, cache_size =
400000
12:31:52 Reading MFT entry. number = 4, mft_size = 12d10
12:31:52 data_offset = 1000, data_size = 400, file_size =

4b44000
12:31:52
400000
12:31:52
12:31:52
4b44000
12:31:52
400000
12:31:52
12:31:52
4b44000
12:31:52
400000
12:31:52
12:31:52
4b44000
12:31:52
400000
12:31:52
12:31:52
4b44000
12:31:52
400000
12:31:52
12:31:52
4b44000
12:31:52
400000
12:31:52
12:31:52
4b44000
12:31:52
400000
12:31:52
12:31:52
4b44000
12:31:52
400000
12:31:52
12:31:52
4b44000
12:31:52
400000
12:31:52
12:31:52
12:31:52
4b44000
12:31:52
400000
12:31:52
12:31:52
12:31:52
4b44000
12:31:52
400000
12:31:52
12:31:52
12:31:52
4b44000
12:31:52

cache = 1550020, cache_offset = 0, cache_size =


Reading MFT entry. number = 5, mft_size = 12d10
data_offset = 1400, data_size = 400, file_size =
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 6, mft_size = 12d10
data_offset = 1800, data_size = 400, file_size =
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 7, mft_size = 12d10
data_offset = 1c00, data_size = 400, file_size =
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 8, mft_size = 12d10
data_offset = 2000, data_size = 400, file_size =
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 9, mft_size = 12d10
data_offset = 2400, data_size = 400, file_size =
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = a, mft_size = 12d10
data_offset = 2800, data_size = 400, file_size =
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = b, mft_size = 12d10
data_offset = 2c00, data_size = 400, file_size =
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = c, mft_size = 12d10
data_offset = 3000, data_size = 400, file_size =
cache = 1550020, cache_offset = 0, cache_size =
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = d, mft_size = 12d10
data_offset = 3400, data_size = 400, file_size =
cache = 1550020, cache_offset = 0, cache_size =
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = e, mft_size = 12d10
data_offset = 3800, data_size = 400, file_size =
cache = 1550020, cache_offset = 0, cache_size =
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = f, mft_size = 12d10
data_offset = 3c00, data_size = 400, file_size =
cache = 1550020, cache_offset = 0, cache_size =

400000
12:31:52
12:31:52
12:31:52
4b44000
12:31:52
400000
12:31:52
0
12:31:52
12:31:52
12:31:52
12:31:52
4b44000
12:31:52
400000
12:31:52
0
12:31:52
12:31:52
12:31:52
12:31:52
4b44000
12:31:52
400000
12:31:52
0
12:31:52
12:31:52
12:31:52
12:31:52
4b44000
12:31:52
400000
12:31:52
0
12:31:52
12:31:52
12:31:52
12:31:52
4b44000
12:31:52
400000
12:31:52
0
12:31:52
12:31:52
12:31:52
12:31:52
4b44000
12:31:52
400000
12:31:52
0
12:31:52
12:31:52
12:31:52
12:31:52
4b44000
12:31:52

CEFSContainer::AddFile: invalid File name. rc = 111


Reading MFT entry. number = 10, mft_size = 12d10
data_offset = 4000, data_size = 400, file_size =

cache = 1550020, cache_offset = 0, cache_size =

CMFTEntry::ParseEntry: invalid MFT entry magic. magic =

CMFTEntry: MFT entry number 10


CEFSContainer::AddFile: invalid MFT entry. rc = 101
Reading MFT entry. number = 11, mft_size = 12d10
data_offset = 4400, data_size = 400, file_size =

cache = 1550020, cache_offset = 0, cache_size =

CMFTEntry::ParseEntry: invalid MFT entry magic. magic =

CMFTEntry: MFT entry number 11


CEFSContainer::AddFile: invalid MFT entry. rc = 101
Reading MFT entry. number = 12, mft_size = 12d10
data_offset = 4800, data_size = 400, file_size =

cache = 1550020, cache_offset = 0, cache_size =

CMFTEntry::ParseEntry: invalid MFT entry magic. magic =

CMFTEntry: MFT entry number 12


CEFSContainer::AddFile: invalid MFT entry. rc = 101
Reading MFT entry. number = 13, mft_size = 12d10
data_offset = 4c00, data_size = 400, file_size =

cache = 1550020, cache_offset = 0, cache_size =

CMFTEntry::ParseEntry: invalid MFT entry magic. magic =

CMFTEntry: MFT entry number 13


CEFSContainer::AddFile: invalid MFT entry. rc = 101
Reading MFT entry. number = 14, mft_size = 12d10
data_offset = 5000, data_size = 400, file_size =

cache = 1550020, cache_offset = 0, cache_size =

CMFTEntry::ParseEntry: invalid MFT entry magic. magic =

CMFTEntry: MFT entry number 14


CEFSContainer::AddFile: invalid MFT entry. rc = 101
Reading MFT entry. number = 15, mft_size = 12d10
data_offset = 5400, data_size = 400, file_size =

cache = 1550020, cache_offset = 0, cache_size =

CMFTEntry::ParseEntry: invalid MFT entry magic. magic =

CMFTEntry: MFT entry number 15


CEFSContainer::AddFile: invalid MFT entry. rc = 101
Reading MFT entry. number = 16, mft_size = 12d10
data_offset = 5800, data_size = 400, file_size =

cache = 1550020, cache_offset = 0, cache_size =

400000
12:31:52
0
12:31:52
12:31:52
12:31:52
12:31:52
4b44000
12:31:52
400000
12:31:52
0
12:31:52
12:31:52
12:31:52
12:31:52
4b44000
12:31:52
400000
12:31:52
12:31:52
4b44000
12:31:52
400000
12:31:52
12:31:52
4b44000
12:31:52
400000
12:31:52
12:31:52
4b44000
12:31:52
400000
12:31:52
nd
12:31:52
12:31:52
12:31:52
12:31:52
4b44000
12:31:52
400000
12:31:52
12:31:52
4b44000
12:31:52
400000
12:31:52
12:31:52
4b44000
12:31:52
400000
12:31:52
12:31:52
4b44000
12:31:52
400000
12:31:52
12:31:52

CMFTEntry::ParseEntry: invalid MFT entry magic. magic =

CMFTEntry: MFT entry number 16


CEFSContainer::AddFile: invalid MFT entry. rc = 101
Reading MFT entry. number = 17, mft_size = 12d10
data_offset = 5c00, data_size = 400, file_size =

cache = 1550020, cache_offset = 0, cache_size =

CMFTEntry::ParseEntry: invalid MFT entry magic. magic =

CMFTEntry: MFT entry number 17


CEFSContainer::AddFile: invalid MFT entry. rc = 101
Reading MFT entry. number = 18, mft_size = 12d10
data_offset = 6000, data_size = 400, file_size =

cache = 1550020, cache_offset = 0, cache_size =


Reading MFT entry. number = 19, mft_size = 12d10
data_offset = 6400, data_size = 400, file_size =
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 1a, mft_size = 12d10
data_offset = 6800, data_size = 400, file_size =
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 1b, mft_size = 12d10
data_offset = 6c00, data_size = 400, file_size =
cache = 1550020, cache_offset = 0, cache_size =

CMFTEntry::GetFileName: $FILE_NAME attribute was not fou

CMFTEntry: MFT entry number 1b


CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 1c, mft_size = 12d10
data_offset = 7000, data_size = 400, file_size =

cache = 1550020, cache_offset = 0, cache_size =


Reading MFT entry. number = 1d, mft_size = 12d10
data_offset = 7400, data_size = 400, file_size =
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 1e, mft_size = 12d10
data_offset = 7800, data_size = 400, file_size =
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 1f, mft_size = 12d10
data_offset = 7c00, data_size = 400, file_size =
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 20, mft_size = 12d10
data_offset = 8000, data_size = 400, file_size =

4b44000
12:31:52
400000
12:31:52
12:31:52
4b44000
12:31:52
400000
12:31:52
12:31:52
4b44000
12:31:52
400000
12:31:52
12:31:52
4b44000
12:31:52
400000
12:31:52
12:31:52
4b44000
12:31:52
400000
12:31:52
12:31:52
4b44000
12:31:52
400000
12:31:52
12:31:52
4b44000
12:31:52
400000
12:31:52
12:31:52
4b44000
12:31:52
400000
12:31:52
12:31:52
4b44000
12:31:52
400000
12:31:52
12:31:52
4b44000
12:31:52
400000
12:31:52
12:31:52
4b44000
12:31:52
400000
12:31:52
12:31:52
4b44000
12:31:52
400000
12:31:52
12:31:52

cache = 1550020, cache_offset = 0, cache_size =


Reading MFT entry. number = 21, mft_size = 12d10
data_offset = 8400, data_size = 400, file_size =
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 22, mft_size = 12d10
data_offset = 8800, data_size = 400, file_size =
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 23, mft_size = 12d10
data_offset = 8c00, data_size = 400, file_size =
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 24, mft_size = 12d10
data_offset = 9000, data_size = 400, file_size =
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 25, mft_size = 12d10
data_offset = 9400, data_size = 400, file_size =
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 26, mft_size = 12d10
data_offset = 9800, data_size = 400, file_size =
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 27, mft_size = 12d10
data_offset = 9c00, data_size = 400, file_size =
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 28, mft_size = 12d10
data_offset = a000, data_size = 400, file_size =
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 29, mft_size = 12d10
data_offset = a400, data_size = 400, file_size =
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 2a, mft_size = 12d10
data_offset = a800, data_size = 400, file_size =
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 2b, mft_size = 12d10
data_offset = ac00, data_size = 400, file_size =
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 2c, mft_size = 12d10
data_offset = b000, data_size = 400, file_size =

4b44000
12:31:52
400000
12:31:52
12:31:52
4b44000
12:31:52
400000
12:31:52
12:31:52
4b44000
12:31:52
400000
12:31:52
12:31:52
4b44000
12:31:52
400000
12:31:52
12:31:52
4b44000
12:31:52
400000
12:31:52
12:31:52
4b44000
12:31:52
400000
12:31:52
12:31:52
4b44000
12:31:52
400000
12:31:52
12:31:52
4b44000
12:31:52
400000
12:31:52
12:31:52
4b44000
12:31:52
400000
12:31:52
12:31:52
4b44000
12:31:52
400000
12:31:52
12:31:52
4b44000
12:31:52
400000
12:31:52
12:31:52
4b44000
12:31:52
400000
12:31:52
12:31:52

cache = 1550020, cache_offset = 0, cache_size =


Reading MFT entry. number = 2d, mft_size = 12d10
data_offset = b400, data_size = 400, file_size =
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 2e, mft_size = 12d10
data_offset = b800, data_size = 400, file_size =
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 2f, mft_size = 12d10
data_offset = bc00, data_size = 400, file_size =
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 30, mft_size = 12d10
data_offset = c000, data_size = 400, file_size =
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 31, mft_size = 12d10
data_offset = c400, data_size = 400, file_size =
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 32, mft_size = 12d10
data_offset = c800, data_size = 400, file_size =
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 33, mft_size = 12d10
data_offset = cc00, data_size = 400, file_size =
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 34, mft_size = 12d10
data_offset = d000, data_size = 400, file_size =
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 35, mft_size = 12d10
data_offset = d400, data_size = 400, file_size =
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 36, mft_size = 12d10
data_offset = d800, data_size = 400, file_size =
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 37, mft_size = 12d10
data_offset = dc00, data_size = 400, file_size =
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 38, mft_size = 12d10
data_offset = e000, data_size = 400, file_size =

4b44000
12:31:52 400000
12:31:52 12:31:52 4b44000
12:31:52 400000
12:31:52 12:31:52 4b44000
12:31:52 400000
12:31:52 12:31:52 4b44000
12:31:52 400000
12:31:52 12:31:52 4b44000
12:31:52 400000
12:31:52 12:31:52 4b44000
12:31:52 400000
12:31:52 12:31:52 4b44000
12:31:52 400000
12:31:52 12:31:52 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 -

cache = 1550020, cache_offset = 0, cache_size =


Reading MFT entry. number = 39, mft_size = 12d10
data_offset = e400, data_size = 400, file_size =
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 3a, mft_size = 12d10
data_offset = e800, data_size = 400, file_size =
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 3b, mft_size = 12d10
data_offset = ec00, data_size = 400, file_size =
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 3c, mft_size = 12d10
data_offset = f000, data_size = 400, file_size =
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 3d, mft_size = 12d10
data_offset = f400, data_size = 400, file_size =
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 3e, mft_size = 12d10
data_offset = f800, data_size = 400, file_size =
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 3f, mft_size = 12d10
data_offset = fc00, data_size = 400, file_size =
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 40, mft_size = 12d10
data_offset = 10000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 41, mft_size = 12d10
data_offset = 10400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 42, mft_size = 12d10
data_offset = 10800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 43, mft_size = 12d10
data_offset = 10c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 44, mft_size = 12d10
data_offset = 11000, data_size = 400, file_size

= 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 -

cache = 1550020, cache_offset = 0, cache_size =


Reading MFT entry. number = 45, mft_size = 12d10
data_offset = 11400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 46, mft_size = 12d10
data_offset = 11800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 47, mft_size = 12d10
data_offset = 11c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 48, mft_size = 12d10
data_offset = 12000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 49, mft_size = 12d10
data_offset = 12400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 4a, mft_size = 12d10
data_offset = 12800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 4b, mft_size = 12d10
data_offset = 12c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 4c, mft_size = 12d10
data_offset = 13000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 4d, mft_size = 12d10
data_offset = 13400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 4e, mft_size = 12d10
data_offset = 13800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 4f, mft_size = 12d10
data_offset = 13c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 50, mft_size = 12d10
data_offset = 14000, data_size = 400, file_size

= 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 -

cache = 1550020, cache_offset = 0, cache_size =


Reading MFT entry. number = 51, mft_size = 12d10
data_offset = 14400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 52, mft_size = 12d10
data_offset = 14800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 53, mft_size = 12d10
data_offset = 14c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 54, mft_size = 12d10
data_offset = 15000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 55, mft_size = 12d10
data_offset = 15400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 56, mft_size = 12d10
data_offset = 15800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 57, mft_size = 12d10
data_offset = 15c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 58, mft_size = 12d10
data_offset = 16000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 59, mft_size = 12d10
data_offset = 16400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 5a, mft_size = 12d10
data_offset = 16800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 5b, mft_size = 12d10
data_offset = 16c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 5c, mft_size = 12d10
data_offset = 17000, data_size = 400, file_size

= 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 -

cache = 1550020, cache_offset = 0, cache_size =


Reading MFT entry. number = 5d, mft_size = 12d10
data_offset = 17400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 5e, mft_size = 12d10
data_offset = 17800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 5f, mft_size = 12d10
data_offset = 17c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 60, mft_size = 12d10
data_offset = 18000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 61, mft_size = 12d10
data_offset = 18400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 62, mft_size = 12d10
data_offset = 18800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 63, mft_size = 12d10
data_offset = 18c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 64, mft_size = 12d10
data_offset = 19000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 65, mft_size = 12d10
data_offset = 19400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 66, mft_size = 12d10
data_offset = 19800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 67, mft_size = 12d10
data_offset = 19c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 68, mft_size = 12d10
data_offset = 1a000, data_size = 400, file_size

= 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 -

cache = 1550020, cache_offset = 0, cache_size =


Reading MFT entry. number = 69, mft_size = 12d10
data_offset = 1a400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 6a, mft_size = 12d10
data_offset = 1a800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 6b, mft_size = 12d10
data_offset = 1ac00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 6c, mft_size = 12d10
data_offset = 1b000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 6d, mft_size = 12d10
data_offset = 1b400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 6e, mft_size = 12d10
data_offset = 1b800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 6f, mft_size = 12d10
data_offset = 1bc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 70, mft_size = 12d10
data_offset = 1c000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 71, mft_size = 12d10
data_offset = 1c400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 72, mft_size = 12d10
data_offset = 1c800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 73, mft_size = 12d10
data_offset = 1cc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 74, mft_size = 12d10
data_offset = 1d000, data_size = 400, file_size

= 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 -

cache = 1550020, cache_offset = 0, cache_size =


Reading MFT entry. number = 75, mft_size = 12d10
data_offset = 1d400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 76, mft_size = 12d10
data_offset = 1d800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 77, mft_size = 12d10
data_offset = 1dc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 78, mft_size = 12d10
data_offset = 1e000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 79, mft_size = 12d10
data_offset = 1e400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 7a, mft_size = 12d10
data_offset = 1e800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 7b, mft_size = 12d10
data_offset = 1ec00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 7c, mft_size = 12d10
data_offset = 1f000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 7d, mft_size = 12d10
data_offset = 1f400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 7e, mft_size = 12d10
data_offset = 1f800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 7f, mft_size = 12d10
data_offset = 1fc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 80, mft_size = 12d10
data_offset = 20000, data_size = 400, file_size

= 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 -

cache = 1550020, cache_offset = 0, cache_size =


Reading MFT entry. number = 81, mft_size = 12d10
data_offset = 20400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 82, mft_size = 12d10
data_offset = 20800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 83, mft_size = 12d10
data_offset = 20c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 84, mft_size = 12d10
data_offset = 21000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 85, mft_size = 12d10
data_offset = 21400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 86, mft_size = 12d10
data_offset = 21800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 87, mft_size = 12d10
data_offset = 21c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 88, mft_size = 12d10
data_offset = 22000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 89, mft_size = 12d10
data_offset = 22400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 8a, mft_size = 12d10
data_offset = 22800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 8b, mft_size = 12d10
data_offset = 22c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 8c, mft_size = 12d10
data_offset = 23000, data_size = 400, file_size

= 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 -

cache = 1550020, cache_offset = 0, cache_size =


Reading MFT entry. number = 8d, mft_size = 12d10
data_offset = 23400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 8e, mft_size = 12d10
data_offset = 23800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 8f, mft_size = 12d10
data_offset = 23c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 90, mft_size = 12d10
data_offset = 24000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 91, mft_size = 12d10
data_offset = 24400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 92, mft_size = 12d10
data_offset = 24800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 93, mft_size = 12d10
data_offset = 24c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 94, mft_size = 12d10
data_offset = 25000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 95, mft_size = 12d10
data_offset = 25400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 96, mft_size = 12d10
data_offset = 25800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 97, mft_size = 12d10
data_offset = 25c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 98, mft_size = 12d10
data_offset = 26000, data_size = 400, file_size

= 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 -

cache = 1550020, cache_offset = 0, cache_size =


Reading MFT entry. number = 99, mft_size = 12d10
data_offset = 26400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 9a, mft_size = 12d10
data_offset = 26800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 9b, mft_size = 12d10
data_offset = 26c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 9c, mft_size = 12d10
data_offset = 27000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 9d, mft_size = 12d10
data_offset = 27400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 9d
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 9e, mft_size = 12d10
data_offset = 27800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 9e
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 9f, mft_size = 12d10
data_offset = 27c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = a0, mft_size = 12d10
data_offset = 28000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = a1, mft_size = 12d10
data_offset = 28400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number a1
CEFSContainer::AddFile: invalid File name. rc = 111

12:31:52 12:31:52 = 4b44000


12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd

Reading MFT entry. number = a2, mft_size = 12d10


data_offset = 28800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = a3, mft_size = 12d10
data_offset = 28c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = a4, mft_size = 12d10
data_offset = 29000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = a5, mft_size = 12d10
data_offset = 29400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = a6, mft_size = 12d10
data_offset = 29800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = a7, mft_size = 12d10
data_offset = 29c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = a8, mft_size = 12d10
data_offset = 2a000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number a8
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = a9, mft_size = 12d10
data_offset = 2a400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = aa, mft_size = 12d10
data_offset = 2a800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number aa
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = ab, mft_size = 12d10
data_offset = 2ac00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou

12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000


12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000

CMFTEntry: MFT entry number ab


CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = ac, mft_size = 12d10
data_offset = 2b000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = ad, mft_size = 12d10
data_offset = 2b400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = ae, mft_size = 12d10
data_offset = 2b800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = af, mft_size = 12d10
data_offset = 2bc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = b0, mft_size = 12d10
data_offset = 2c000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = b1, mft_size = 12d10
data_offset = 2c400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = b2, mft_size = 12d10
data_offset = 2c800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = b3, mft_size = 12d10
data_offset = 2cc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = b4, mft_size = 12d10
data_offset = 2d000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = b5, mft_size = 12d10
data_offset = 2d400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = b6, mft_size = 12d10
data_offset = 2d800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = b7, mft_size = 12d10
data_offset = 2dc00, data_size = 400, file_size

12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000

cache = 1550020, cache_offset = 0, cache_size =


Reading MFT entry. number = b8, mft_size = 12d10
data_offset = 2e000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = b9, mft_size = 12d10
data_offset = 2e400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = ba, mft_size = 12d10
data_offset = 2e800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = bb, mft_size = 12d10
data_offset = 2ec00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = bc, mft_size = 12d10
data_offset = 2f000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = bd, mft_size = 12d10
data_offset = 2f400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = be, mft_size = 12d10
data_offset = 2f800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = bf, mft_size = 12d10
data_offset = 2fc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = c0, mft_size = 12d10
data_offset = 30000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = c1, mft_size = 12d10
data_offset = 30400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = c2, mft_size = 12d10
data_offset = 30800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = c3, mft_size = 12d10
data_offset = 30c00, data_size = 400, file_size

12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 -

cache = 1550020, cache_offset = 0, cache_size =


Reading MFT entry. number = c4, mft_size = 12d10
data_offset = 31000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = c5, mft_size = 12d10
data_offset = 31400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = c6, mft_size = 12d10
data_offset = 31800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = c7, mft_size = 12d10
data_offset = 31c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = c8, mft_size = 12d10
data_offset = 32000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = c9, mft_size = 12d10
data_offset = 32400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = ca, mft_size = 12d10
data_offset = 32800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = cb, mft_size = 12d10
data_offset = 32c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = cc, mft_size = 12d10
data_offset = 33000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = cd, mft_size = 12d10
data_offset = 33400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number cd
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = ce, mft_size = 12d10
data_offset = 33800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =

400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 -

Reading MFT entry. number = cf, mft_size = 12d10


data_offset = 33c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = d0, mft_size = 12d10
data_offset = 34000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = d1, mft_size = 12d10
data_offset = 34400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = d2, mft_size = 12d10
data_offset = 34800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = d3, mft_size = 12d10
data_offset = 34c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = d4, mft_size = 12d10
data_offset = 35000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = d5, mft_size = 12d10
data_offset = 35400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = d6, mft_size = 12d10
data_offset = 35800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = d7, mft_size = 12d10
data_offset = 35c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = d8, mft_size = 12d10
data_offset = 36000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = d9, mft_size = 12d10
data_offset = 36400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = da, mft_size = 12d10
data_offset = 36800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =

400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 -

Reading MFT entry. number = db, mft_size = 12d10


data_offset = 36c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = dc, mft_size = 12d10
data_offset = 37000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = dd, mft_size = 12d10
data_offset = 37400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number dd
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = de, mft_size = 12d10
data_offset = 37800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = df, mft_size = 12d10
data_offset = 37c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = e0, mft_size = 12d10
data_offset = 38000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = e1, mft_size = 12d10
data_offset = 38400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number e1
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = e2, mft_size = 12d10
data_offset = 38800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = e3, mft_size = 12d10
data_offset = 38c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = e4, mft_size = 12d10
data_offset = 39000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = e5, mft_size = 12d10

12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000

data_offset = 39400, data_size = 400, file_size


cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number e5
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = e6, mft_size = 12d10
data_offset = 39800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = e7, mft_size = 12d10
data_offset = 39c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = e8, mft_size = 12d10
data_offset = 3a000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = e9, mft_size = 12d10
data_offset = 3a400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = ea, mft_size = 12d10
data_offset = 3a800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = eb, mft_size = 12d10
data_offset = 3ac00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = ec, mft_size = 12d10
data_offset = 3b000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = ed, mft_size = 12d10
data_offset = 3b400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = ee, mft_size = 12d10
data_offset = 3b800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number ee
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = ef, mft_size = 12d10
data_offset = 3bc00, data_size = 400, file_size

12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000

cache = 1550020, cache_offset = 0, cache_size =


Reading MFT entry. number = f0, mft_size = 12d10
data_offset = 3c000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = f1, mft_size = 12d10
data_offset = 3c400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = f2, mft_size = 12d10
data_offset = 3c800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = f3, mft_size = 12d10
data_offset = 3cc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = f4, mft_size = 12d10
data_offset = 3d000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = f5, mft_size = 12d10
data_offset = 3d400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = f6, mft_size = 12d10
data_offset = 3d800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = f7, mft_size = 12d10
data_offset = 3dc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = f8, mft_size = 12d10
data_offset = 3e000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = f9, mft_size = 12d10
data_offset = 3e400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = fa, mft_size = 12d10
data_offset = 3e800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = fb, mft_size = 12d10
data_offset = 3ec00, data_size = 400, file_size

12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000

cache = 1550020, cache_offset = 0, cache_size =


Reading MFT entry. number = fc, mft_size = 12d10
data_offset = 3f000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = fd, mft_size = 12d10
data_offset = 3f400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = fe, mft_size = 12d10
data_offset = 3f800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = ff, mft_size = 12d10
data_offset = 3fc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 100, mft_size = 12d10
data_offset = 40000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 101, mft_size = 12d10
data_offset = 40400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 102, mft_size = 12d10
data_offset = 40800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 103, mft_size = 12d10
data_offset = 40c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 104, mft_size = 12d10
data_offset = 41000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 105, mft_size = 12d10
data_offset = 41400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 106, mft_size = 12d10
data_offset = 41800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 107, mft_size = 12d10
data_offset = 41c00, data_size = 400, file_size

12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000

cache = 1550020, cache_offset = 0, cache_size =


Reading MFT entry. number = 108, mft_size = 12d10
data_offset = 42000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 109, mft_size = 12d10
data_offset = 42400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 10a, mft_size = 12d10
data_offset = 42800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 10b, mft_size = 12d10
data_offset = 42c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 10c, mft_size = 12d10
data_offset = 43000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 10d, mft_size = 12d10
data_offset = 43400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 10e, mft_size = 12d10
data_offset = 43800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 10f, mft_size = 12d10
data_offset = 43c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 110, mft_size = 12d10
data_offset = 44000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 111, mft_size = 12d10
data_offset = 44400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 112, mft_size = 12d10
data_offset = 44800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 113, mft_size = 12d10
data_offset = 44c00, data_size = 400, file_size

12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd

cache = 1550020, cache_offset = 0, cache_size =


Reading MFT entry. number = 114, mft_size = 12d10
data_offset = 45000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 114
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 115, mft_size = 12d10
data_offset = 45400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 115
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 116, mft_size = 12d10
data_offset = 45800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 117, mft_size = 12d10
data_offset = 45c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 117
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 118, mft_size = 12d10
data_offset = 46000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 119, mft_size = 12d10
data_offset = 46400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 119
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 11a, mft_size = 12d10
data_offset = 46800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 11b, mft_size = 12d10
data_offset = 46c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou

12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000


12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 -

CMFTEntry: MFT entry number 11b


CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 11c, mft_size = 12d10
data_offset = 47000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 11d, mft_size = 12d10
data_offset = 47400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 11d
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 11e, mft_size = 12d10
data_offset = 47800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 11f, mft_size = 12d10
data_offset = 47c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 11f
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 120, mft_size = 12d10
data_offset = 48000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 121, mft_size = 12d10
data_offset = 48400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 122, mft_size = 12d10
data_offset = 48800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 123, mft_size = 12d10
data_offset = 48c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 123
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 124, mft_size = 12d10
data_offset = 49000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 125, mft_size = 12d10

12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000

data_offset = 49400, data_size = 400, file_size


cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 125
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 126, mft_size = 12d10
data_offset = 49800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 127, mft_size = 12d10
data_offset = 49c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 127
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 128, mft_size = 12d10
data_offset = 4a000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 129, mft_size = 12d10
data_offset = 4a400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 129
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 12a, mft_size = 12d10
data_offset = 4a800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 12b, mft_size = 12d10
data_offset = 4ac00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 12b
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 12c, mft_size = 12d10
data_offset = 4b000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 12d, mft_size = 12d10
data_offset = 4b400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =

12:31:52 12:31:52 = 4b44000


12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000

Reading MFT entry. number = 12e, mft_size = 12d10


data_offset = 4b800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 12f, mft_size = 12d10
data_offset = 4bc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 130, mft_size = 12d10
data_offset = 4c000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 131, mft_size = 12d10
data_offset = 4c400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 132, mft_size = 12d10
data_offset = 4c800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 133, mft_size = 12d10
data_offset = 4cc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 134, mft_size = 12d10
data_offset = 4d000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 135, mft_size = 12d10
data_offset = 4d400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 136, mft_size = 12d10
data_offset = 4d800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 137, mft_size = 12d10
data_offset = 4dc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 138, mft_size = 12d10
data_offset = 4e000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 139, mft_size = 12d10
data_offset = 4e400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =

12:31:52 12:31:52 = 4b44000


12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 -

Reading MFT entry. number = 13a, mft_size = 12d10


data_offset = 4e800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 13b, mft_size = 12d10
data_offset = 4ec00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 13c, mft_size = 12d10
data_offset = 4f000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 13c
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 13d, mft_size = 12d10
data_offset = 4f400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 13e, mft_size = 12d10
data_offset = 4f800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 13f, mft_size = 12d10
data_offset = 4fc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 140, mft_size = 12d10
data_offset = 50000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 141, mft_size = 12d10
data_offset = 50400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 142, mft_size = 12d10
data_offset = 50800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 143, mft_size = 12d10
data_offset = 50c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 144, mft_size = 12d10
data_offset = 51000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 145, mft_size = 12d10

12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 -

data_offset = 51400, data_size = 400, file_size


cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 146, mft_size = 12d10
data_offset = 51800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 147, mft_size = 12d10
data_offset = 51c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 148, mft_size = 12d10
data_offset = 52000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 149, mft_size = 12d10
data_offset = 52400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 14a, mft_size = 12d10
data_offset = 52800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 14a
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 14b, mft_size = 12d10
data_offset = 52c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 14c, mft_size = 12d10
data_offset = 53000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 14d, mft_size = 12d10
data_offset = 53400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 14e, mft_size = 12d10
data_offset = 53800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 14f, mft_size = 12d10
data_offset = 53c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 150, mft_size = 12d10
data_offset = 54000, data_size = 400, file_size

= 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 -

cache = 1550020, cache_offset = 0, cache_size =


Reading MFT entry. number = 151, mft_size = 12d10
data_offset = 54400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 152, mft_size = 12d10
data_offset = 54800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 153, mft_size = 12d10
data_offset = 54c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 154, mft_size = 12d10
data_offset = 55000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 155, mft_size = 12d10
data_offset = 55400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 156, mft_size = 12d10
data_offset = 55800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 157, mft_size = 12d10
data_offset = 55c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 158, mft_size = 12d10
data_offset = 56000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 159, mft_size = 12d10
data_offset = 56400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 15a, mft_size = 12d10
data_offset = 56800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 15b, mft_size = 12d10
data_offset = 56c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 15c, mft_size = 12d10
data_offset = 57000, data_size = 400, file_size

= 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 -

cache = 1550020, cache_offset = 0, cache_size =


Reading MFT entry. number = 15d, mft_size = 12d10
data_offset = 57400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 15e, mft_size = 12d10
data_offset = 57800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 15f, mft_size = 12d10
data_offset = 57c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 160, mft_size = 12d10
data_offset = 58000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 161, mft_size = 12d10
data_offset = 58400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 162, mft_size = 12d10
data_offset = 58800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 163, mft_size = 12d10
data_offset = 58c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 164, mft_size = 12d10
data_offset = 59000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 165, mft_size = 12d10
data_offset = 59400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 166, mft_size = 12d10
data_offset = 59800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 167, mft_size = 12d10
data_offset = 59c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 168, mft_size = 12d10
data_offset = 5a000, data_size = 400, file_size

= 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 -

cache = 1550020, cache_offset = 0, cache_size =


Reading MFT entry. number = 169, mft_size = 12d10
data_offset = 5a400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 16a, mft_size = 12d10
data_offset = 5a800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 16b, mft_size = 12d10
data_offset = 5ac00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 16c, mft_size = 12d10
data_offset = 5b000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 16d, mft_size = 12d10
data_offset = 5b400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 16e, mft_size = 12d10
data_offset = 5b800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 16f, mft_size = 12d10
data_offset = 5bc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 170, mft_size = 12d10
data_offset = 5c000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 171, mft_size = 12d10
data_offset = 5c400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 172, mft_size = 12d10
data_offset = 5c800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 173, mft_size = 12d10
data_offset = 5cc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 174, mft_size = 12d10
data_offset = 5d000, data_size = 400, file_size

= 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 -

cache = 1550020, cache_offset = 0, cache_size =


Reading MFT entry. number = 175, mft_size = 12d10
data_offset = 5d400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 176, mft_size = 12d10
data_offset = 5d800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 176
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 177, mft_size = 12d10
data_offset = 5dc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 178, mft_size = 12d10
data_offset = 5e000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 179, mft_size = 12d10
data_offset = 5e400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 17a, mft_size = 12d10
data_offset = 5e800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 17b, mft_size = 12d10
data_offset = 5ec00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 17c, mft_size = 12d10
data_offset = 5f000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 17c
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 17d, mft_size = 12d10
data_offset = 5f400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 17e, mft_size = 12d10
data_offset = 5f800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =

400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 -

Reading MFT entry. number = 17f, mft_size = 12d10


data_offset = 5fc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 180, mft_size = 12d10
data_offset = 60000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 181, mft_size = 12d10
data_offset = 60400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 182, mft_size = 12d10
data_offset = 60800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 183, mft_size = 12d10
data_offset = 60c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 184, mft_size = 12d10
data_offset = 61000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 185, mft_size = 12d10
data_offset = 61400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 186, mft_size = 12d10
data_offset = 61800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 187, mft_size = 12d10
data_offset = 61c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 188, mft_size = 12d10
data_offset = 62000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 189, mft_size = 12d10
data_offset = 62400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 18a, mft_size = 12d10
data_offset = 62800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =

400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000

Reading MFT entry. number = 18b, mft_size = 12d10


data_offset = 62c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 18c, mft_size = 12d10
data_offset = 63000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 18d, mft_size = 12d10
data_offset = 63400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 18e, mft_size = 12d10
data_offset = 63800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 18f, mft_size = 12d10
data_offset = 63c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 190, mft_size = 12d10
data_offset = 64000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 191, mft_size = 12d10
data_offset = 64400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 192, mft_size = 12d10
data_offset = 64800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 192
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 193, mft_size = 12d10
data_offset = 64c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 194, mft_size = 12d10
data_offset = 65000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 195, mft_size = 12d10
data_offset = 65400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =

12:31:52 12:31:52 = 4b44000


12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000

Reading MFT entry. number = 196, mft_size = 12d10


data_offset = 65800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 197, mft_size = 12d10
data_offset = 65c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 198, mft_size = 12d10
data_offset = 66000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 199, mft_size = 12d10
data_offset = 66400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 19a, mft_size = 12d10
data_offset = 66800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 19b, mft_size = 12d10
data_offset = 66c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 19c, mft_size = 12d10
data_offset = 67000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 19d, mft_size = 12d10
data_offset = 67400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 19e, mft_size = 12d10
data_offset = 67800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 19f, mft_size = 12d10
data_offset = 67c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 1a0, mft_size = 12d10
data_offset = 68000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 1a1, mft_size = 12d10
data_offset = 68400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =

12:31:52 12:31:52 = 4b44000


12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000

Reading MFT entry. number = 1a2, mft_size = 12d10


data_offset = 68800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 1a3, mft_size = 12d10
data_offset = 68c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 1a4, mft_size = 12d10
data_offset = 69000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 1a5, mft_size = 12d10
data_offset = 69400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 1a6, mft_size = 12d10
data_offset = 69800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 1a7, mft_size = 12d10
data_offset = 69c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 1a8, mft_size = 12d10
data_offset = 6a000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 1a9, mft_size = 12d10
data_offset = 6a400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 1aa, mft_size = 12d10
data_offset = 6a800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 1ab, mft_size = 12d10
data_offset = 6ac00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 1ac, mft_size = 12d10
data_offset = 6b000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 1ad, mft_size = 12d10
data_offset = 6b400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =

12:31:52 12:31:52 = 4b44000


12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 -

Reading MFT entry. number = 1ae, mft_size = 12d10


data_offset = 6b800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 1af, mft_size = 12d10
data_offset = 6bc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 1b0, mft_size = 12d10
data_offset = 6c000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 1b1, mft_size = 12d10
data_offset = 6c400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 1b2, mft_size = 12d10
data_offset = 6c800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 1b3, mft_size = 12d10
data_offset = 6cc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 1b4, mft_size = 12d10
data_offset = 6d000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 1b4
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 1b5, mft_size = 12d10
data_offset = 6d400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 1b5
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 1b6, mft_size = 12d10
data_offset = 6d800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 1b7, mft_size = 12d10
data_offset = 6dc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 1b8, mft_size = 12d10
data_offset = 6e000, data_size = 400, file_size

= 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 -

cache = 1550020, cache_offset = 0, cache_size =


Reading MFT entry. number = 1b9, mft_size = 12d10
data_offset = 6e400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 1ba, mft_size = 12d10
data_offset = 6e800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 1bb, mft_size = 12d10
data_offset = 6ec00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 1bc, mft_size = 12d10
data_offset = 6f000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 1bd, mft_size = 12d10
data_offset = 6f400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 1be, mft_size = 12d10
data_offset = 6f800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 1bf, mft_size = 12d10
data_offset = 6fc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 1c0, mft_size = 12d10
data_offset = 70000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 1c1, mft_size = 12d10
data_offset = 70400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 1c2, mft_size = 12d10
data_offset = 70800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 1c3, mft_size = 12d10
data_offset = 70c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 1c4, mft_size = 12d10
data_offset = 71000, data_size = 400, file_size

= 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000

cache = 1550020, cache_offset = 0, cache_size =


Reading MFT entry. number = 1c5, mft_size = 12d10
data_offset = 71400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 1c6, mft_size = 12d10
data_offset = 71800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 1c7, mft_size = 12d10
data_offset = 71c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 1c8, mft_size = 12d10
data_offset = 72000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 1c9, mft_size = 12d10
data_offset = 72400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 1ca, mft_size = 12d10
data_offset = 72800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 1ca
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 1cb, mft_size = 12d10
data_offset = 72c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 1cc, mft_size = 12d10
data_offset = 73000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 1cd, mft_size = 12d10
data_offset = 73400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 1ce, mft_size = 12d10
data_offset = 73800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 1cf, mft_size = 12d10
data_offset = 73c00, data_size = 400, file_size

12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000

cache = 1550020, cache_offset = 0, cache_size =


Reading MFT entry. number = 1d0, mft_size = 12d10
data_offset = 74000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 1d1, mft_size = 12d10
data_offset = 74400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 1d2, mft_size = 12d10
data_offset = 74800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 1d3, mft_size = 12d10
data_offset = 74c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 1d4, mft_size = 12d10
data_offset = 75000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 1d5, mft_size = 12d10
data_offset = 75400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 1d6, mft_size = 12d10
data_offset = 75800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 1d7, mft_size = 12d10
data_offset = 75c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 1d8, mft_size = 12d10
data_offset = 76000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 1d9, mft_size = 12d10
data_offset = 76400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 1da, mft_size = 12d10
data_offset = 76800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 1db, mft_size = 12d10
data_offset = 76c00, data_size = 400, file_size

12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000

cache = 1550020, cache_offset = 0, cache_size =


Reading MFT entry. number = 1dc, mft_size = 12d10
data_offset = 77000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 1dd, mft_size = 12d10
data_offset = 77400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 1de, mft_size = 12d10
data_offset = 77800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 1df, mft_size = 12d10
data_offset = 77c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 1e0, mft_size = 12d10
data_offset = 78000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 1e1, mft_size = 12d10
data_offset = 78400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 1e2, mft_size = 12d10
data_offset = 78800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 1e3, mft_size = 12d10
data_offset = 78c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 1e4, mft_size = 12d10
data_offset = 79000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 1e5, mft_size = 12d10
data_offset = 79400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 1e6, mft_size = 12d10
data_offset = 79800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 1e7, mft_size = 12d10
data_offset = 79c00, data_size = 400, file_size

12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 -

cache = 1550020, cache_offset = 0, cache_size =


Reading MFT entry. number = 1e8, mft_size = 12d10
data_offset = 7a000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 1e9, mft_size = 12d10
data_offset = 7a400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 1ea, mft_size = 12d10
data_offset = 7a800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 1eb, mft_size = 12d10
data_offset = 7ac00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 1ec, mft_size = 12d10
data_offset = 7b000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 1ed, mft_size = 12d10
data_offset = 7b400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 1ee, mft_size = 12d10
data_offset = 7b800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 1ef, mft_size = 12d10
data_offset = 7bc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 1ef
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 1f0, mft_size = 12d10
data_offset = 7c000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 1f1, mft_size = 12d10
data_offset = 7c400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 1f2, mft_size = 12d10
data_offset = 7c800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =

400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 -

Reading MFT entry. number = 1f3, mft_size = 12d10


data_offset = 7cc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 1f4, mft_size = 12d10
data_offset = 7d000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 1f4
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 1f5, mft_size = 12d10
data_offset = 7d400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 1f6, mft_size = 12d10
data_offset = 7d800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 1f7, mft_size = 12d10
data_offset = 7dc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 1f8, mft_size = 12d10
data_offset = 7e000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 1f9, mft_size = 12d10
data_offset = 7e400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 1fa, mft_size = 12d10
data_offset = 7e800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 1fb, mft_size = 12d10
data_offset = 7ec00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 1fb
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 1fc, mft_size = 12d10
data_offset = 7f000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 1fd, mft_size = 12d10

12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 -

data_offset = 7f400, data_size = 400, file_size


cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 1fe, mft_size = 12d10
data_offset = 7f800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 1ff, mft_size = 12d10
data_offset = 7fc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 200, mft_size = 12d10
data_offset = 80000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 201, mft_size = 12d10
data_offset = 80400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 202, mft_size = 12d10
data_offset = 80800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 203, mft_size = 12d10
data_offset = 80c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 204, mft_size = 12d10
data_offset = 81000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 205, mft_size = 12d10
data_offset = 81400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 206, mft_size = 12d10
data_offset = 81800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 207, mft_size = 12d10
data_offset = 81c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 208, mft_size = 12d10
data_offset = 82000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 209, mft_size = 12d10

12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 -

data_offset = 82400, data_size = 400, file_size


cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 20a, mft_size = 12d10
data_offset = 82800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 20b, mft_size = 12d10
data_offset = 82c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 20b
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 20c, mft_size = 12d10
data_offset = 83000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 20d, mft_size = 12d10
data_offset = 83400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 20e, mft_size = 12d10
data_offset = 83800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 20f, mft_size = 12d10
data_offset = 83c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 210, mft_size = 12d10
data_offset = 84000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 211, mft_size = 12d10
data_offset = 84400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 212, mft_size = 12d10
data_offset = 84800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 213, mft_size = 12d10
data_offset = 84c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 214, mft_size = 12d10
data_offset = 85000, data_size = 400, file_size

= 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 -

cache = 1550020, cache_offset = 0, cache_size =


Reading MFT entry. number = 215, mft_size = 12d10
data_offset = 85400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 216, mft_size = 12d10
data_offset = 85800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 217, mft_size = 12d10
data_offset = 85c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 218, mft_size = 12d10
data_offset = 86000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 219, mft_size = 12d10
data_offset = 86400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 21a, mft_size = 12d10
data_offset = 86800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 21b, mft_size = 12d10
data_offset = 86c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 21c, mft_size = 12d10
data_offset = 87000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 21d, mft_size = 12d10
data_offset = 87400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 21e, mft_size = 12d10
data_offset = 87800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 21f, mft_size = 12d10
data_offset = 87c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 220, mft_size = 12d10
data_offset = 88000, data_size = 400, file_size

= 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 -

cache = 1550020, cache_offset = 0, cache_size =


Reading MFT entry. number = 221, mft_size = 12d10
data_offset = 88400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 222, mft_size = 12d10
data_offset = 88800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 223, mft_size = 12d10
data_offset = 88c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 224, mft_size = 12d10
data_offset = 89000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 225, mft_size = 12d10
data_offset = 89400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 226, mft_size = 12d10
data_offset = 89800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 227, mft_size = 12d10
data_offset = 89c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 228, mft_size = 12d10
data_offset = 8a000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 229, mft_size = 12d10
data_offset = 8a400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 22a, mft_size = 12d10
data_offset = 8a800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 22b, mft_size = 12d10
data_offset = 8ac00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 22c, mft_size = 12d10
data_offset = 8b000, data_size = 400, file_size

= 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000

cache = 1550020, cache_offset = 0, cache_size =


Reading MFT entry. number = 22d, mft_size = 12d10
data_offset = 8b400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 22e, mft_size = 12d10
data_offset = 8b800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 22f, mft_size = 12d10
data_offset = 8bc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 230, mft_size = 12d10
data_offset = 8c000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 231, mft_size = 12d10
data_offset = 8c400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 232, mft_size = 12d10
data_offset = 8c800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 233, mft_size = 12d10
data_offset = 8cc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 234, mft_size = 12d10
data_offset = 8d000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 234
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 235, mft_size = 12d10
data_offset = 8d400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 236, mft_size = 12d10
data_offset = 8d800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 237, mft_size = 12d10
data_offset = 8dc00, data_size = 400, file_size

12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 -

cache = 1550020, cache_offset = 0, cache_size =


Reading MFT entry. number = 238, mft_size = 12d10
data_offset = 8e000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 239, mft_size = 12d10
data_offset = 8e400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 239
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 23a, mft_size = 12d10
data_offset = 8e800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 23b, mft_size = 12d10
data_offset = 8ec00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 23c, mft_size = 12d10
data_offset = 8f000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 23d, mft_size = 12d10
data_offset = 8f400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 23e, mft_size = 12d10
data_offset = 8f800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 23f, mft_size = 12d10
data_offset = 8fc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 240, mft_size = 12d10
data_offset = 90000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 241, mft_size = 12d10
data_offset = 90400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 242, mft_size = 12d10
data_offset = 90800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =

400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 -

Reading MFT entry. number = 243, mft_size = 12d10


data_offset = 90c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 244, mft_size = 12d10
data_offset = 91000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 245, mft_size = 12d10
data_offset = 91400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 246, mft_size = 12d10
data_offset = 91800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 247, mft_size = 12d10
data_offset = 91c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 248, mft_size = 12d10
data_offset = 92000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 249, mft_size = 12d10
data_offset = 92400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 24a, mft_size = 12d10
data_offset = 92800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 24b, mft_size = 12d10
data_offset = 92c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 24c, mft_size = 12d10
data_offset = 93000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 24d, mft_size = 12d10
data_offset = 93400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 24e, mft_size = 12d10
data_offset = 93800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =

400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000

Reading MFT entry. number = 24f, mft_size = 12d10


data_offset = 93c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 24f
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 250, mft_size = 12d10
data_offset = 94000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 251, mft_size = 12d10
data_offset = 94400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 252, mft_size = 12d10
data_offset = 94800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 253, mft_size = 12d10
data_offset = 94c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 254, mft_size = 12d10
data_offset = 95000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 255, mft_size = 12d10
data_offset = 95400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 256, mft_size = 12d10
data_offset = 95800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 257, mft_size = 12d10
data_offset = 95c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 258, mft_size = 12d10
data_offset = 96000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 259, mft_size = 12d10
data_offset = 96400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =

12:31:52 12:31:52 = 4b44000


12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000

Reading MFT entry. number = 25a, mft_size = 12d10


data_offset = 96800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 25b, mft_size = 12d10
data_offset = 96c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 25c, mft_size = 12d10
data_offset = 97000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 25d, mft_size = 12d10
data_offset = 97400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 25e, mft_size = 12d10
data_offset = 97800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 25f, mft_size = 12d10
data_offset = 97c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 260, mft_size = 12d10
data_offset = 98000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 261, mft_size = 12d10
data_offset = 98400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 262, mft_size = 12d10
data_offset = 98800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 263, mft_size = 12d10
data_offset = 98c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 264, mft_size = 12d10
data_offset = 99000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 265, mft_size = 12d10
data_offset = 99400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =

12:31:52 12:31:52 = 4b44000


12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000

Reading MFT entry. number = 266, mft_size = 12d10


data_offset = 99800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 267, mft_size = 12d10
data_offset = 99c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 268, mft_size = 12d10
data_offset = 9a000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 269, mft_size = 12d10
data_offset = 9a400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 26a, mft_size = 12d10
data_offset = 9a800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 26b, mft_size = 12d10
data_offset = 9ac00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 26c, mft_size = 12d10
data_offset = 9b000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 26d, mft_size = 12d10
data_offset = 9b400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 26e, mft_size = 12d10
data_offset = 9b800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 26f, mft_size = 12d10
data_offset = 9bc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 270, mft_size = 12d10
data_offset = 9c000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 271, mft_size = 12d10
data_offset = 9c400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =

12:31:52 12:31:52 = 4b44000


12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 -

Reading MFT entry. number = 272, mft_size = 12d10


data_offset = 9c800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 273, mft_size = 12d10
data_offset = 9cc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 274, mft_size = 12d10
data_offset = 9d000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 275, mft_size = 12d10
data_offset = 9d400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 276, mft_size = 12d10
data_offset = 9d800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 276
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 277, mft_size = 12d10
data_offset = 9dc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 278, mft_size = 12d10
data_offset = 9e000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 279, mft_size = 12d10
data_offset = 9e400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 27a, mft_size = 12d10
data_offset = 9e800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 27b, mft_size = 12d10
data_offset = 9ec00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 27c, mft_size = 12d10
data_offset = 9f000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 27d, mft_size = 12d10

12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 -

data_offset = 9f400, data_size = 400, file_size


cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 27e, mft_size = 12d10
data_offset = 9f800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 27f, mft_size = 12d10
data_offset = 9fc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 280, mft_size = 12d10
data_offset = a0000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 281, mft_size = 12d10
data_offset = a0400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 282, mft_size = 12d10
data_offset = a0800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 283, mft_size = 12d10
data_offset = a0c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 284, mft_size = 12d10
data_offset = a1000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 285, mft_size = 12d10
data_offset = a1400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 286, mft_size = 12d10
data_offset = a1800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 287, mft_size = 12d10
data_offset = a1c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 288, mft_size = 12d10
data_offset = a2000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 289, mft_size = 12d10

12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 -

data_offset = a2400, data_size = 400, file_size


cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 28a, mft_size = 12d10
data_offset = a2800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 28b, mft_size = 12d10
data_offset = a2c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 28c, mft_size = 12d10
data_offset = a3000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 28d, mft_size = 12d10
data_offset = a3400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 28e, mft_size = 12d10
data_offset = a3800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 28f, mft_size = 12d10
data_offset = a3c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 290, mft_size = 12d10
data_offset = a4000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 291, mft_size = 12d10
data_offset = a4400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 292, mft_size = 12d10
data_offset = a4800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 293, mft_size = 12d10
data_offset = a4c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 293
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 294, mft_size = 12d10
data_offset = a5000, data_size = 400, file_size

= 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000

cache = 1550020, cache_offset = 0, cache_size =


Reading MFT entry. number = 295, mft_size = 12d10
data_offset = a5400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 295
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 296, mft_size = 12d10
data_offset = a5800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 296
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 297, mft_size = 12d10
data_offset = a5c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 298, mft_size = 12d10
data_offset = a6000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 299, mft_size = 12d10
data_offset = a6400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 29a, mft_size = 12d10
data_offset = a6800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 29a
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 29b, mft_size = 12d10
data_offset = a6c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 29c, mft_size = 12d10
data_offset = a7000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 29d, mft_size = 12d10
data_offset = a7400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =

12:31:52 12:31:52 = 4b44000


12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000

Reading MFT entry. number = 29e, mft_size = 12d10


data_offset = a7800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 29f, mft_size = 12d10
data_offset = a7c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 2a0, mft_size = 12d10
data_offset = a8000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 2a1, mft_size = 12d10
data_offset = a8400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 2a2, mft_size = 12d10
data_offset = a8800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 2a3, mft_size = 12d10
data_offset = a8c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 2a4, mft_size = 12d10
data_offset = a9000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 2a5, mft_size = 12d10
data_offset = a9400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 2a6, mft_size = 12d10
data_offset = a9800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 2a7, mft_size = 12d10
data_offset = a9c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 2a8, mft_size = 12d10
data_offset = aa000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 2a9, mft_size = 12d10
data_offset = aa400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =

12:31:52 12:31:52 = 4b44000


12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 -

Reading MFT entry. number = 2aa, mft_size = 12d10


data_offset = aa800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 2ab, mft_size = 12d10
data_offset = aac00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 2ac, mft_size = 12d10
data_offset = ab000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 2ac
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 2ad, mft_size = 12d10
data_offset = ab400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 2ae, mft_size = 12d10
data_offset = ab800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 2af, mft_size = 12d10
data_offset = abc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 2b0, mft_size = 12d10
data_offset = ac000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 2b1, mft_size = 12d10
data_offset = ac400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 2b2, mft_size = 12d10
data_offset = ac800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 2b3, mft_size = 12d10
data_offset = acc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 2b4, mft_size = 12d10
data_offset = ad000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 2b5, mft_size = 12d10

12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 -

data_offset = ad400, data_size = 400, file_size


cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 2b6, mft_size = 12d10
data_offset = ad800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 2b7, mft_size = 12d10
data_offset = adc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 2b8, mft_size = 12d10
data_offset = ae000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 2b9, mft_size = 12d10
data_offset = ae400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 2ba, mft_size = 12d10
data_offset = ae800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 2ba
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 2bb, mft_size = 12d10
data_offset = aec00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 2bc, mft_size = 12d10
data_offset = af000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 2bd, mft_size = 12d10
data_offset = af400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 2be, mft_size = 12d10
data_offset = af800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 2bf, mft_size = 12d10
data_offset = afc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 2c0, mft_size = 12d10
data_offset = b0000, data_size = 400, file_size

= 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 -

cache = 1550020, cache_offset = 0, cache_size =


Reading MFT entry. number = 2c1, mft_size = 12d10
data_offset = b0400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 2c2, mft_size = 12d10
data_offset = b0800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 2c3, mft_size = 12d10
data_offset = b0c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 2c4, mft_size = 12d10
data_offset = b1000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 2c5, mft_size = 12d10
data_offset = b1400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 2c6, mft_size = 12d10
data_offset = b1800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 2c7, mft_size = 12d10
data_offset = b1c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 2c8, mft_size = 12d10
data_offset = b2000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 2c9, mft_size = 12d10
data_offset = b2400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 2ca, mft_size = 12d10
data_offset = b2800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 2cb, mft_size = 12d10
data_offset = b2c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 2cc, mft_size = 12d10
data_offset = b3000, data_size = 400, file_size

= 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000

cache = 1550020, cache_offset = 0, cache_size =


Reading MFT entry. number = 2cd, mft_size = 12d10
data_offset = b3400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 2ce, mft_size = 12d10
data_offset = b3800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 2cf, mft_size = 12d10
data_offset = b3c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 2d0, mft_size = 12d10
data_offset = b4000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 2d1, mft_size = 12d10
data_offset = b4400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 2d1
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 2d2, mft_size = 12d10
data_offset = b4800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 2d3, mft_size = 12d10
data_offset = b4c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 2d4, mft_size = 12d10
data_offset = b5000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 2d5, mft_size = 12d10
data_offset = b5400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 2d6, mft_size = 12d10
data_offset = b5800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 2d7, mft_size = 12d10
data_offset = b5c00, data_size = 400, file_size

12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000

cache = 1550020, cache_offset = 0, cache_size =


Reading MFT entry. number = 2d8, mft_size = 12d10
data_offset = b6000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 2d9, mft_size = 12d10
data_offset = b6400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 2da, mft_size = 12d10
data_offset = b6800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 2db, mft_size = 12d10
data_offset = b6c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 2dc, mft_size = 12d10
data_offset = b7000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 2dd, mft_size = 12d10
data_offset = b7400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 2de, mft_size = 12d10
data_offset = b7800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 2df, mft_size = 12d10
data_offset = b7c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 2e0, mft_size = 12d10
data_offset = b8000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 2e1, mft_size = 12d10
data_offset = b8400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 2e2, mft_size = 12d10
data_offset = b8800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 2e3, mft_size = 12d10
data_offset = b8c00, data_size = 400, file_size

12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000

cache = 1550020, cache_offset = 0, cache_size =


Reading MFT entry. number = 2e4, mft_size = 12d10
data_offset = b9000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 2e5, mft_size = 12d10
data_offset = b9400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 2e6, mft_size = 12d10
data_offset = b9800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 2e7, mft_size = 12d10
data_offset = b9c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 2e8, mft_size = 12d10
data_offset = ba000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 2e9, mft_size = 12d10
data_offset = ba400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 2ea, mft_size = 12d10
data_offset = ba800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 2eb, mft_size = 12d10
data_offset = bac00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 2ec, mft_size = 12d10
data_offset = bb000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 2ed, mft_size = 12d10
data_offset = bb400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 2ee, mft_size = 12d10
data_offset = bb800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 2ef, mft_size = 12d10
data_offset = bbc00, data_size = 400, file_size

12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000

cache = 1550020, cache_offset = 0, cache_size =


Reading MFT entry. number = 2f0, mft_size = 12d10
data_offset = bc000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 2f1, mft_size = 12d10
data_offset = bc400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 2f2, mft_size = 12d10
data_offset = bc800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 2f3, mft_size = 12d10
data_offset = bcc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 2f4, mft_size = 12d10
data_offset = bd000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 2f5, mft_size = 12d10
data_offset = bd400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 2f6, mft_size = 12d10
data_offset = bd800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 2f7, mft_size = 12d10
data_offset = bdc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 2f8, mft_size = 12d10
data_offset = be000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 2f9, mft_size = 12d10
data_offset = be400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 2fa, mft_size = 12d10
data_offset = be800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 2fb, mft_size = 12d10
data_offset = bec00, data_size = 400, file_size

12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000

cache = 1550020, cache_offset = 0, cache_size =


Reading MFT entry. number = 2fc, mft_size = 12d10
data_offset = bf000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 2fd, mft_size = 12d10
data_offset = bf400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 2fe, mft_size = 12d10
data_offset = bf800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 2ff, mft_size = 12d10
data_offset = bfc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 300, mft_size = 12d10
data_offset = c0000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 301, mft_size = 12d10
data_offset = c0400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 302, mft_size = 12d10
data_offset = c0800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 303, mft_size = 12d10
data_offset = c0c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 304, mft_size = 12d10
data_offset = c1000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 305, mft_size = 12d10
data_offset = c1400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 306, mft_size = 12d10
data_offset = c1800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 307, mft_size = 12d10
data_offset = c1c00, data_size = 400, file_size

12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000

cache = 1550020, cache_offset = 0, cache_size =


Reading MFT entry. number = 308, mft_size = 12d10
data_offset = c2000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 309, mft_size = 12d10
data_offset = c2400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 30a, mft_size = 12d10
data_offset = c2800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 30b, mft_size = 12d10
data_offset = c2c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 30c, mft_size = 12d10
data_offset = c3000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 30d, mft_size = 12d10
data_offset = c3400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 30e, mft_size = 12d10
data_offset = c3800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 30f, mft_size = 12d10
data_offset = c3c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 310, mft_size = 12d10
data_offset = c4000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 311, mft_size = 12d10
data_offset = c4400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 312, mft_size = 12d10
data_offset = c4800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 313, mft_size = 12d10
data_offset = c4c00, data_size = 400, file_size

12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000

cache = 1550020, cache_offset = 0, cache_size =


Reading MFT entry. number = 314, mft_size = 12d10
data_offset = c5000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 315, mft_size = 12d10
data_offset = c5400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 316, mft_size = 12d10
data_offset = c5800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 317, mft_size = 12d10
data_offset = c5c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 318, mft_size = 12d10
data_offset = c6000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 319, mft_size = 12d10
data_offset = c6400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 31a, mft_size = 12d10
data_offset = c6800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 31b, mft_size = 12d10
data_offset = c6c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 31c, mft_size = 12d10
data_offset = c7000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 31d, mft_size = 12d10
data_offset = c7400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 31e, mft_size = 12d10
data_offset = c7800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 31f, mft_size = 12d10
data_offset = c7c00, data_size = 400, file_size

12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000

cache = 1550020, cache_offset = 0, cache_size =


Reading MFT entry. number = 320, mft_size = 12d10
data_offset = c8000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 321, mft_size = 12d10
data_offset = c8400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 322, mft_size = 12d10
data_offset = c8800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 323, mft_size = 12d10
data_offset = c8c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 324, mft_size = 12d10
data_offset = c9000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 325, mft_size = 12d10
data_offset = c9400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 326, mft_size = 12d10
data_offset = c9800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 327, mft_size = 12d10
data_offset = c9c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 328, mft_size = 12d10
data_offset = ca000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 329, mft_size = 12d10
data_offset = ca400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 32a, mft_size = 12d10
data_offset = ca800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 32b, mft_size = 12d10
data_offset = cac00, data_size = 400, file_size

12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000

cache = 1550020, cache_offset = 0, cache_size =


Reading MFT entry. number = 32c, mft_size = 12d10
data_offset = cb000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 32d, mft_size = 12d10
data_offset = cb400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 32e, mft_size = 12d10
data_offset = cb800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 32f, mft_size = 12d10
data_offset = cbc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 330, mft_size = 12d10
data_offset = cc000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 331, mft_size = 12d10
data_offset = cc400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 332, mft_size = 12d10
data_offset = cc800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 333, mft_size = 12d10
data_offset = ccc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 334, mft_size = 12d10
data_offset = cd000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 335, mft_size = 12d10
data_offset = cd400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 336, mft_size = 12d10
data_offset = cd800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 337, mft_size = 12d10
data_offset = cdc00, data_size = 400, file_size

12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000

cache = 1550020, cache_offset = 0, cache_size =


Reading MFT entry. number = 338, mft_size = 12d10
data_offset = ce000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 339, mft_size = 12d10
data_offset = ce400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 33a, mft_size = 12d10
data_offset = ce800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 33b, mft_size = 12d10
data_offset = cec00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 33c, mft_size = 12d10
data_offset = cf000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 33d, mft_size = 12d10
data_offset = cf400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 33e, mft_size = 12d10
data_offset = cf800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 33f, mft_size = 12d10
data_offset = cfc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 340, mft_size = 12d10
data_offset = d0000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 341, mft_size = 12d10
data_offset = d0400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 342, mft_size = 12d10
data_offset = d0800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 343, mft_size = 12d10
data_offset = d0c00, data_size = 400, file_size

12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000

cache = 1550020, cache_offset = 0, cache_size =


Reading MFT entry. number = 344, mft_size = 12d10
data_offset = d1000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 345, mft_size = 12d10
data_offset = d1400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 346, mft_size = 12d10
data_offset = d1800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 347, mft_size = 12d10
data_offset = d1c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 348, mft_size = 12d10
data_offset = d2000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 349, mft_size = 12d10
data_offset = d2400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 34a, mft_size = 12d10
data_offset = d2800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 34b, mft_size = 12d10
data_offset = d2c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 34c, mft_size = 12d10
data_offset = d3000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 34d, mft_size = 12d10
data_offset = d3400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 34e, mft_size = 12d10
data_offset = d3800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 34f, mft_size = 12d10
data_offset = d3c00, data_size = 400, file_size

12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000

cache = 1550020, cache_offset = 0, cache_size =


Reading MFT entry. number = 350, mft_size = 12d10
data_offset = d4000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 351, mft_size = 12d10
data_offset = d4400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 352, mft_size = 12d10
data_offset = d4800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 353, mft_size = 12d10
data_offset = d4c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 354, mft_size = 12d10
data_offset = d5000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 355, mft_size = 12d10
data_offset = d5400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 356, mft_size = 12d10
data_offset = d5800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 357, mft_size = 12d10
data_offset = d5c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 358, mft_size = 12d10
data_offset = d6000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 359, mft_size = 12d10
data_offset = d6400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 35a, mft_size = 12d10
data_offset = d6800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 35b, mft_size = 12d10
data_offset = d6c00, data_size = 400, file_size

12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000

cache = 1550020, cache_offset = 0, cache_size =


Reading MFT entry. number = 35c, mft_size = 12d10
data_offset = d7000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 35d, mft_size = 12d10
data_offset = d7400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 35e, mft_size = 12d10
data_offset = d7800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 35f, mft_size = 12d10
data_offset = d7c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 360, mft_size = 12d10
data_offset = d8000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 361, mft_size = 12d10
data_offset = d8400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 362, mft_size = 12d10
data_offset = d8800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 363, mft_size = 12d10
data_offset = d8c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 364, mft_size = 12d10
data_offset = d9000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 365, mft_size = 12d10
data_offset = d9400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 366, mft_size = 12d10
data_offset = d9800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 367, mft_size = 12d10
data_offset = d9c00, data_size = 400, file_size

12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000

cache = 1550020, cache_offset = 0, cache_size =


Reading MFT entry. number = 368, mft_size = 12d10
data_offset = da000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 369, mft_size = 12d10
data_offset = da400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 36a, mft_size = 12d10
data_offset = da800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 36b, mft_size = 12d10
data_offset = dac00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 36c, mft_size = 12d10
data_offset = db000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 36d, mft_size = 12d10
data_offset = db400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 36e, mft_size = 12d10
data_offset = db800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 36f, mft_size = 12d10
data_offset = dbc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 370, mft_size = 12d10
data_offset = dc000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 371, mft_size = 12d10
data_offset = dc400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 372, mft_size = 12d10
data_offset = dc800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 373, mft_size = 12d10
data_offset = dcc00, data_size = 400, file_size

12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000

cache = 1550020, cache_offset = 0, cache_size =


Reading MFT entry. number = 374, mft_size = 12d10
data_offset = dd000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 375, mft_size = 12d10
data_offset = dd400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 376, mft_size = 12d10
data_offset = dd800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 377, mft_size = 12d10
data_offset = ddc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 378, mft_size = 12d10
data_offset = de000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 379, mft_size = 12d10
data_offset = de400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 37a, mft_size = 12d10
data_offset = de800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 37b, mft_size = 12d10
data_offset = dec00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 37c, mft_size = 12d10
data_offset = df000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 37d, mft_size = 12d10
data_offset = df400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 37e, mft_size = 12d10
data_offset = df800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 37f, mft_size = 12d10
data_offset = dfc00, data_size = 400, file_size

12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000

cache = 1550020, cache_offset = 0, cache_size =


Reading MFT entry. number = 380, mft_size = 12d10
data_offset = e0000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 381, mft_size = 12d10
data_offset = e0400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 382, mft_size = 12d10
data_offset = e0800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 383, mft_size = 12d10
data_offset = e0c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 384, mft_size = 12d10
data_offset = e1000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 385, mft_size = 12d10
data_offset = e1400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 386, mft_size = 12d10
data_offset = e1800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 387, mft_size = 12d10
data_offset = e1c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 388, mft_size = 12d10
data_offset = e2000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 389, mft_size = 12d10
data_offset = e2400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 38a, mft_size = 12d10
data_offset = e2800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 38b, mft_size = 12d10
data_offset = e2c00, data_size = 400, file_size

12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000

cache = 1550020, cache_offset = 0, cache_size =


Reading MFT entry. number = 38c, mft_size = 12d10
data_offset = e3000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 38d, mft_size = 12d10
data_offset = e3400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 38e, mft_size = 12d10
data_offset = e3800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 38f, mft_size = 12d10
data_offset = e3c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 390, mft_size = 12d10
data_offset = e4000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 391, mft_size = 12d10
data_offset = e4400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 392, mft_size = 12d10
data_offset = e4800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 393, mft_size = 12d10
data_offset = e4c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 394, mft_size = 12d10
data_offset = e5000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 395, mft_size = 12d10
data_offset = e5400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 396, mft_size = 12d10
data_offset = e5800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 397, mft_size = 12d10
data_offset = e5c00, data_size = 400, file_size

12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000

cache = 1550020, cache_offset = 0, cache_size =


Reading MFT entry. number = 398, mft_size = 12d10
data_offset = e6000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 399, mft_size = 12d10
data_offset = e6400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 39a, mft_size = 12d10
data_offset = e6800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 39b, mft_size = 12d10
data_offset = e6c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 39c, mft_size = 12d10
data_offset = e7000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 39d, mft_size = 12d10
data_offset = e7400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 39e, mft_size = 12d10
data_offset = e7800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 39f, mft_size = 12d10
data_offset = e7c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 3a0, mft_size = 12d10
data_offset = e8000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 3a1, mft_size = 12d10
data_offset = e8400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 3a2, mft_size = 12d10
data_offset = e8800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 3a3, mft_size = 12d10
data_offset = e8c00, data_size = 400, file_size

12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000

cache = 1550020, cache_offset = 0, cache_size =


Reading MFT entry. number = 3a4, mft_size = 12d10
data_offset = e9000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 3a5, mft_size = 12d10
data_offset = e9400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 3a6, mft_size = 12d10
data_offset = e9800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 3a7, mft_size = 12d10
data_offset = e9c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 3a8, mft_size = 12d10
data_offset = ea000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 3a9, mft_size = 12d10
data_offset = ea400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 3aa, mft_size = 12d10
data_offset = ea800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 3ab, mft_size = 12d10
data_offset = eac00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 3ac, mft_size = 12d10
data_offset = eb000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 3ad, mft_size = 12d10
data_offset = eb400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 3ae, mft_size = 12d10
data_offset = eb800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 3af, mft_size = 12d10
data_offset = ebc00, data_size = 400, file_size

12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000

cache = 1550020, cache_offset = 0, cache_size =


Reading MFT entry. number = 3b0, mft_size = 12d10
data_offset = ec000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 3b1, mft_size = 12d10
data_offset = ec400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 3b2, mft_size = 12d10
data_offset = ec800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 3b3, mft_size = 12d10
data_offset = ecc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 3b4, mft_size = 12d10
data_offset = ed000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 3b5, mft_size = 12d10
data_offset = ed400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 3b6, mft_size = 12d10
data_offset = ed800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 3b7, mft_size = 12d10
data_offset = edc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 3b8, mft_size = 12d10
data_offset = ee000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 3b9, mft_size = 12d10
data_offset = ee400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 3ba, mft_size = 12d10
data_offset = ee800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 3bb, mft_size = 12d10
data_offset = eec00, data_size = 400, file_size

12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000

cache = 1550020, cache_offset = 0, cache_size =


Reading MFT entry. number = 3bc, mft_size = 12d10
data_offset = ef000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 3bd, mft_size = 12d10
data_offset = ef400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 3be, mft_size = 12d10
data_offset = ef800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 3bf, mft_size = 12d10
data_offset = efc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 3c0, mft_size = 12d10
data_offset = f0000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 3c1, mft_size = 12d10
data_offset = f0400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 3c2, mft_size = 12d10
data_offset = f0800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 3c3, mft_size = 12d10
data_offset = f0c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 3c4, mft_size = 12d10
data_offset = f1000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 3c5, mft_size = 12d10
data_offset = f1400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 3c6, mft_size = 12d10
data_offset = f1800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 3c7, mft_size = 12d10
data_offset = f1c00, data_size = 400, file_size

12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 -

cache = 1550020, cache_offset = 0, cache_size =


Reading MFT entry. number = 3c8, mft_size = 12d10
data_offset = f2000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 3c9, mft_size = 12d10
data_offset = f2400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 3c9
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 3ca, mft_size = 12d10
data_offset = f2800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 3cb, mft_size = 12d10
data_offset = f2c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 3cc, mft_size = 12d10
data_offset = f3000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 3cd, mft_size = 12d10
data_offset = f3400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 3ce, mft_size = 12d10
data_offset = f3800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 3cf, mft_size = 12d10
data_offset = f3c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 3d0, mft_size = 12d10
data_offset = f4000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 3d1, mft_size = 12d10
data_offset = f4400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 3d2, mft_size = 12d10
data_offset = f4800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =

400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 -

Reading MFT entry. number = 3d3, mft_size = 12d10


data_offset = f4c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 3d4, mft_size = 12d10
data_offset = f5000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 3d5, mft_size = 12d10
data_offset = f5400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 3d6, mft_size = 12d10
data_offset = f5800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 3d7, mft_size = 12d10
data_offset = f5c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 3d8, mft_size = 12d10
data_offset = f6000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 3d9, mft_size = 12d10
data_offset = f6400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 3da, mft_size = 12d10
data_offset = f6800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 3db, mft_size = 12d10
data_offset = f6c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 3dc, mft_size = 12d10
data_offset = f7000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 3dd, mft_size = 12d10
data_offset = f7400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 3de, mft_size = 12d10
data_offset = f7800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =

400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 -

Reading MFT entry. number = 3df, mft_size = 12d10


data_offset = f7c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 3e0, mft_size = 12d10
data_offset = f8000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 3e1, mft_size = 12d10
data_offset = f8400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 3e2, mft_size = 12d10
data_offset = f8800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 3e3, mft_size = 12d10
data_offset = f8c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 3e4, mft_size = 12d10
data_offset = f9000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 3e5, mft_size = 12d10
data_offset = f9400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 3e6, mft_size = 12d10
data_offset = f9800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 3e7, mft_size = 12d10
data_offset = f9c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 3e8, mft_size = 12d10
data_offset = fa000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 3e9, mft_size = 12d10
data_offset = fa400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 3ea, mft_size = 12d10
data_offset = fa800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =

400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 -

Reading MFT entry. number = 3eb, mft_size = 12d10


data_offset = fac00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 3ec, mft_size = 12d10
data_offset = fb000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 3ed, mft_size = 12d10
data_offset = fb400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 3ee, mft_size = 12d10
data_offset = fb800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 3ef, mft_size = 12d10
data_offset = fbc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 3f0, mft_size = 12d10
data_offset = fc000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 3f1, mft_size = 12d10
data_offset = fc400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 3f2, mft_size = 12d10
data_offset = fc800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 3f3, mft_size = 12d10
data_offset = fcc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 3f4, mft_size = 12d10
data_offset = fd000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 3f5, mft_size = 12d10
data_offset = fd400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 3f6, mft_size = 12d10
data_offset = fd800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =

400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 -

Reading MFT entry. number = 3f7, mft_size = 12d10


data_offset = fdc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 3f8, mft_size = 12d10
data_offset = fe000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 3f9, mft_size = 12d10
data_offset = fe400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 3fa, mft_size = 12d10
data_offset = fe800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 3fb, mft_size = 12d10
data_offset = fec00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 3fc, mft_size = 12d10
data_offset = ff000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 3fd, mft_size = 12d10
data_offset = ff400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 3fe, mft_size = 12d10
data_offset = ff800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 3ff, mft_size = 12d10
data_offset = ffc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 400, mft_size = 12d10
data_offset = 100000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 401, mft_size = 12d10
data_offset = 100400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 402, mft_size = 12d10
data_offset = 100800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =

400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 -

Reading MFT entry. number = 403, mft_size = 12d10


data_offset = 100c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 404, mft_size = 12d10
data_offset = 101000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 405, mft_size = 12d10
data_offset = 101400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 406, mft_size = 12d10
data_offset = 101800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 407, mft_size = 12d10
data_offset = 101c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 408, mft_size = 12d10
data_offset = 102000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 409, mft_size = 12d10
data_offset = 102400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 40a, mft_size = 12d10
data_offset = 102800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 40b, mft_size = 12d10
data_offset = 102c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 40c, mft_size = 12d10
data_offset = 103000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 40d, mft_size = 12d10
data_offset = 103400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 40e, mft_size = 12d10
data_offset = 103800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =

400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000

CMFTEntry::GetFileName: $FILE_NAME attribute was not fou


CMFTEntry: MFT entry number 40e
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 40f, mft_size = 12d10
data_offset = 103c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 410, mft_size = 12d10
data_offset = 104000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 411, mft_size = 12d10
data_offset = 104400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 412, mft_size = 12d10
data_offset = 104800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 413, mft_size = 12d10
data_offset = 104c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 414, mft_size = 12d10
data_offset = 105000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 415, mft_size = 12d10
data_offset = 105400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 416, mft_size = 12d10
data_offset = 105800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 417, mft_size = 12d10
data_offset = 105c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 418, mft_size = 12d10
data_offset = 106000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 419, mft_size = 12d10
data_offset = 106400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =

12:31:52 12:31:52 = 4b44000


12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000

Reading MFT entry. number = 41a, mft_size = 12d10


data_offset = 106800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 41b, mft_size = 12d10
data_offset = 106c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 41c, mft_size = 12d10
data_offset = 107000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 41d, mft_size = 12d10
data_offset = 107400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 41e, mft_size = 12d10
data_offset = 107800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 41f, mft_size = 12d10
data_offset = 107c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 420, mft_size = 12d10
data_offset = 108000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 421, mft_size = 12d10
data_offset = 108400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 422, mft_size = 12d10
data_offset = 108800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 423, mft_size = 12d10
data_offset = 108c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 424, mft_size = 12d10
data_offset = 109000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 425, mft_size = 12d10
data_offset = 109400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =

12:31:52 12:31:52 = 4b44000


12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 -

Reading MFT entry. number = 426, mft_size = 12d10


data_offset = 109800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 427, mft_size = 12d10
data_offset = 109c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 427
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 428, mft_size = 12d10
data_offset = 10a000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 429, mft_size = 12d10
data_offset = 10a400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 42a, mft_size = 12d10
data_offset = 10a800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 42b, mft_size = 12d10
data_offset = 10ac00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 42c, mft_size = 12d10
data_offset = 10b000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 42d, mft_size = 12d10
data_offset = 10b400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 42e, mft_size = 12d10
data_offset = 10b800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 42f, mft_size = 12d10
data_offset = 10bc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 430, mft_size = 12d10
data_offset = 10c000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 431, mft_size = 12d10

12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 -

data_offset = 10c400, data_size = 400, file_size


cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 432, mft_size = 12d10
data_offset = 10c800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 433, mft_size = 12d10
data_offset = 10cc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 434, mft_size = 12d10
data_offset = 10d000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 435, mft_size = 12d10
data_offset = 10d400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 436, mft_size = 12d10
data_offset = 10d800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 437, mft_size = 12d10
data_offset = 10dc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 438, mft_size = 12d10
data_offset = 10e000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 439, mft_size = 12d10
data_offset = 10e400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 43a, mft_size = 12d10
data_offset = 10e800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 43b, mft_size = 12d10
data_offset = 10ec00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 43c, mft_size = 12d10
data_offset = 10f000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 43d, mft_size = 12d10

12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 -

data_offset = 10f400, data_size = 400, file_size


cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 43e, mft_size = 12d10
data_offset = 10f800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 43f, mft_size = 12d10
data_offset = 10fc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 440, mft_size = 12d10
data_offset = 110000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 441, mft_size = 12d10
data_offset = 110400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 442, mft_size = 12d10
data_offset = 110800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 443, mft_size = 12d10
data_offset = 110c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 444, mft_size = 12d10
data_offset = 111000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 445, mft_size = 12d10
data_offset = 111400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 446, mft_size = 12d10
data_offset = 111800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 447, mft_size = 12d10
data_offset = 111c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 448, mft_size = 12d10
data_offset = 112000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 449, mft_size = 12d10

12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 -

data_offset = 112400, data_size = 400, file_size


cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 44a, mft_size = 12d10
data_offset = 112800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 44b, mft_size = 12d10
data_offset = 112c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 44c, mft_size = 12d10
data_offset = 113000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 44d, mft_size = 12d10
data_offset = 113400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 44e, mft_size = 12d10
data_offset = 113800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 44f, mft_size = 12d10
data_offset = 113c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 450, mft_size = 12d10
data_offset = 114000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 451, mft_size = 12d10
data_offset = 114400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 452, mft_size = 12d10
data_offset = 114800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 453, mft_size = 12d10
data_offset = 114c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 454, mft_size = 12d10
data_offset = 115000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 455, mft_size = 12d10

12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 -

data_offset = 115400, data_size = 400, file_size


cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 456, mft_size = 12d10
data_offset = 115800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 457, mft_size = 12d10
data_offset = 115c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 458, mft_size = 12d10
data_offset = 116000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 459, mft_size = 12d10
data_offset = 116400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 45a, mft_size = 12d10
data_offset = 116800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 45b, mft_size = 12d10
data_offset = 116c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 45c, mft_size = 12d10
data_offset = 117000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 45d, mft_size = 12d10
data_offset = 117400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 45e, mft_size = 12d10
data_offset = 117800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 45f, mft_size = 12d10
data_offset = 117c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 460, mft_size = 12d10
data_offset = 118000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 461, mft_size = 12d10

12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 -

data_offset = 118400, data_size = 400, file_size


cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 462, mft_size = 12d10
data_offset = 118800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 463, mft_size = 12d10
data_offset = 118c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 464, mft_size = 12d10
data_offset = 119000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 465, mft_size = 12d10
data_offset = 119400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 466, mft_size = 12d10
data_offset = 119800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 467, mft_size = 12d10
data_offset = 119c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 468, mft_size = 12d10
data_offset = 11a000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 469, mft_size = 12d10
data_offset = 11a400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 46a, mft_size = 12d10
data_offset = 11a800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 46b, mft_size = 12d10
data_offset = 11ac00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 46c, mft_size = 12d10
data_offset = 11b000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 46d, mft_size = 12d10

12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 -

data_offset = 11b400, data_size = 400, file_size


cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 46e, mft_size = 12d10
data_offset = 11b800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 46f, mft_size = 12d10
data_offset = 11bc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 470, mft_size = 12d10
data_offset = 11c000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 471, mft_size = 12d10
data_offset = 11c400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 472, mft_size = 12d10
data_offset = 11c800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 473, mft_size = 12d10
data_offset = 11cc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 474, mft_size = 12d10
data_offset = 11d000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 475, mft_size = 12d10
data_offset = 11d400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 476, mft_size = 12d10
data_offset = 11d800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 477, mft_size = 12d10
data_offset = 11dc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 478, mft_size = 12d10
data_offset = 11e000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 479, mft_size = 12d10

12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 -

data_offset = 11e400, data_size = 400, file_size


cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 47a, mft_size = 12d10
data_offset = 11e800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 47b, mft_size = 12d10
data_offset = 11ec00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 47c, mft_size = 12d10
data_offset = 11f000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 47d, mft_size = 12d10
data_offset = 11f400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 47e, mft_size = 12d10
data_offset = 11f800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 47f, mft_size = 12d10
data_offset = 11fc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 480, mft_size = 12d10
data_offset = 120000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 481, mft_size = 12d10
data_offset = 120400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 482, mft_size = 12d10
data_offset = 120800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 483, mft_size = 12d10
data_offset = 120c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 484, mft_size = 12d10
data_offset = 121000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou

nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 -

CMFTEntry: MFT entry number 484


CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 485, mft_size = 12d10
data_offset = 121400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 486, mft_size = 12d10
data_offset = 121800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 487, mft_size = 12d10
data_offset = 121c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 488, mft_size = 12d10
data_offset = 122000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 489, mft_size = 12d10
data_offset = 122400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 48a, mft_size = 12d10
data_offset = 122800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 48b, mft_size = 12d10
data_offset = 122c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 48c, mft_size = 12d10
data_offset = 123000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 48d, mft_size = 12d10
data_offset = 123400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 48e, mft_size = 12d10
data_offset = 123800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 48f, mft_size = 12d10
data_offset = 123c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 490, mft_size = 12d10
data_offset = 124000, data_size = 400, file_size

= 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 -

cache = 1550020, cache_offset = 0, cache_size =


Reading MFT entry. number = 491, mft_size = 12d10
data_offset = 124400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 492, mft_size = 12d10
data_offset = 124800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 493, mft_size = 12d10
data_offset = 124c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 494, mft_size = 12d10
data_offset = 125000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 495, mft_size = 12d10
data_offset = 125400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 496, mft_size = 12d10
data_offset = 125800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 497, mft_size = 12d10
data_offset = 125c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 498, mft_size = 12d10
data_offset = 126000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 499, mft_size = 12d10
data_offset = 126400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 49a, mft_size = 12d10
data_offset = 126800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 49b, mft_size = 12d10
data_offset = 126c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 49c, mft_size = 12d10
data_offset = 127000, data_size = 400, file_size

= 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000

cache = 1550020, cache_offset = 0, cache_size =


Reading MFT entry. number = 49d, mft_size = 12d10
data_offset = 127400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 49e, mft_size = 12d10
data_offset = 127800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 49f, mft_size = 12d10
data_offset = 127c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 4a0, mft_size = 12d10
data_offset = 128000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 4a0
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 4a1, mft_size = 12d10
data_offset = 128400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 4a2, mft_size = 12d10
data_offset = 128800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 4a3, mft_size = 12d10
data_offset = 128c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 4a4, mft_size = 12d10
data_offset = 129000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 4a5, mft_size = 12d10
data_offset = 129400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 4a6, mft_size = 12d10
data_offset = 129800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 4a7, mft_size = 12d10
data_offset = 129c00, data_size = 400, file_size

12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000

cache = 1550020, cache_offset = 0, cache_size =


Reading MFT entry. number = 4a8, mft_size = 12d10
data_offset = 12a000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 4a9, mft_size = 12d10
data_offset = 12a400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 4aa, mft_size = 12d10
data_offset = 12a800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 4ab, mft_size = 12d10
data_offset = 12ac00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 4ac, mft_size = 12d10
data_offset = 12b000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 4ad, mft_size = 12d10
data_offset = 12b400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 4ae, mft_size = 12d10
data_offset = 12b800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 4af, mft_size = 12d10
data_offset = 12bc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 4b0, mft_size = 12d10
data_offset = 12c000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 4b1, mft_size = 12d10
data_offset = 12c400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 4b2, mft_size = 12d10
data_offset = 12c800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 4b3, mft_size = 12d10
data_offset = 12cc00, data_size = 400, file_size

12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000

cache = 1550020, cache_offset = 0, cache_size =


Reading MFT entry. number = 4b4, mft_size = 12d10
data_offset = 12d000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 4b5, mft_size = 12d10
data_offset = 12d400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 4b6, mft_size = 12d10
data_offset = 12d800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 4b7, mft_size = 12d10
data_offset = 12dc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 4b8, mft_size = 12d10
data_offset = 12e000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 4b9, mft_size = 12d10
data_offset = 12e400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 4ba, mft_size = 12d10
data_offset = 12e800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 4bb, mft_size = 12d10
data_offset = 12ec00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 4bc, mft_size = 12d10
data_offset = 12f000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 4bd, mft_size = 12d10
data_offset = 12f400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 4be, mft_size = 12d10
data_offset = 12f800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 4bf, mft_size = 12d10
data_offset = 12fc00, data_size = 400, file_size

12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000

cache = 1550020, cache_offset = 0, cache_size =


Reading MFT entry. number = 4c0, mft_size = 12d10
data_offset = 130000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 4c1, mft_size = 12d10
data_offset = 130400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 4c2, mft_size = 12d10
data_offset = 130800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 4c3, mft_size = 12d10
data_offset = 130c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 4c4, mft_size = 12d10
data_offset = 131000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 4c5, mft_size = 12d10
data_offset = 131400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 4c6, mft_size = 12d10
data_offset = 131800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 4c7, mft_size = 12d10
data_offset = 131c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 4c8, mft_size = 12d10
data_offset = 132000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 4c9, mft_size = 12d10
data_offset = 132400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 4ca, mft_size = 12d10
data_offset = 132800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 4cb, mft_size = 12d10
data_offset = 132c00, data_size = 400, file_size

12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000

cache = 1550020, cache_offset = 0, cache_size =


Reading MFT entry. number = 4cc, mft_size = 12d10
data_offset = 133000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 4cd, mft_size = 12d10
data_offset = 133400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 4ce, mft_size = 12d10
data_offset = 133800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 4cf, mft_size = 12d10
data_offset = 133c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 4d0, mft_size = 12d10
data_offset = 134000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 4d1, mft_size = 12d10
data_offset = 134400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 4d2, mft_size = 12d10
data_offset = 134800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 4d3, mft_size = 12d10
data_offset = 134c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 4d4, mft_size = 12d10
data_offset = 135000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 4d5, mft_size = 12d10
data_offset = 135400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 4d6, mft_size = 12d10
data_offset = 135800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 4d7, mft_size = 12d10
data_offset = 135c00, data_size = 400, file_size

12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 -

cache = 1550020, cache_offset = 0, cache_size =


CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 4d7
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 4d8, mft_size = 12d10
data_offset = 136000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 4d9, mft_size = 12d10
data_offset = 136400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 4da, mft_size = 12d10
data_offset = 136800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 4db, mft_size = 12d10
data_offset = 136c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 4dc, mft_size = 12d10
data_offset = 137000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 4dd, mft_size = 12d10
data_offset = 137400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 4de, mft_size = 12d10
data_offset = 137800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 4df, mft_size = 12d10
data_offset = 137c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 4e0, mft_size = 12d10
data_offset = 138000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 4e1, mft_size = 12d10
data_offset = 138400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 4e2, mft_size = 12d10
data_offset = 138800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =

400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 -

Reading MFT entry. number = 4e3, mft_size = 12d10


data_offset = 138c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 4e4, mft_size = 12d10
data_offset = 139000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 4e5, mft_size = 12d10
data_offset = 139400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 4e6, mft_size = 12d10
data_offset = 139800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 4e7, mft_size = 12d10
data_offset = 139c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 4e8, mft_size = 12d10
data_offset = 13a000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 4e9, mft_size = 12d10
data_offset = 13a400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 4ea, mft_size = 12d10
data_offset = 13a800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 4eb, mft_size = 12d10
data_offset = 13ac00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 4ec, mft_size = 12d10
data_offset = 13b000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 4ed, mft_size = 12d10
data_offset = 13b400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 4ee, mft_size = 12d10
data_offset = 13b800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =

400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 -

Reading MFT entry. number = 4ef, mft_size = 12d10


data_offset = 13bc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 4f0, mft_size = 12d10
data_offset = 13c000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 4f1, mft_size = 12d10
data_offset = 13c400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 4f2, mft_size = 12d10
data_offset = 13c800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 4f3, mft_size = 12d10
data_offset = 13cc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 4f4, mft_size = 12d10
data_offset = 13d000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 4f5, mft_size = 12d10
data_offset = 13d400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 4f6, mft_size = 12d10
data_offset = 13d800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 4f7, mft_size = 12d10
data_offset = 13dc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 4f8, mft_size = 12d10
data_offset = 13e000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 4f9, mft_size = 12d10
data_offset = 13e400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 4fa, mft_size = 12d10
data_offset = 13e800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =

400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 -

Reading MFT entry. number = 4fb, mft_size = 12d10


data_offset = 13ec00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 4fc, mft_size = 12d10
data_offset = 13f000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 4fd, mft_size = 12d10
data_offset = 13f400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 4fe, mft_size = 12d10
data_offset = 13f800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 4ff, mft_size = 12d10
data_offset = 13fc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 500, mft_size = 12d10
data_offset = 140000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 501, mft_size = 12d10
data_offset = 140400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 502, mft_size = 12d10
data_offset = 140800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 503, mft_size = 12d10
data_offset = 140c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 504, mft_size = 12d10
data_offset = 141000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 505, mft_size = 12d10
data_offset = 141400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 506, mft_size = 12d10
data_offset = 141800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =

400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 -

Reading MFT entry. number = 507, mft_size = 12d10


data_offset = 141c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 508, mft_size = 12d10
data_offset = 142000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 509, mft_size = 12d10
data_offset = 142400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 50a, mft_size = 12d10
data_offset = 142800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 50b, mft_size = 12d10
data_offset = 142c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 50c, mft_size = 12d10
data_offset = 143000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 50d, mft_size = 12d10
data_offset = 143400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 50e, mft_size = 12d10
data_offset = 143800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 50f, mft_size = 12d10
data_offset = 143c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 510, mft_size = 12d10
data_offset = 144000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 511, mft_size = 12d10
data_offset = 144400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 512, mft_size = 12d10
data_offset = 144800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =

400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000

Reading MFT entry. number = 513, mft_size = 12d10


data_offset = 144c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 514, mft_size = 12d10
data_offset = 145000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 515, mft_size = 12d10
data_offset = 145400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 516, mft_size = 12d10
data_offset = 145800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 517, mft_size = 12d10
data_offset = 145c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 518, mft_size = 12d10
data_offset = 146000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 519, mft_size = 12d10
data_offset = 146400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 51a, mft_size = 12d10
data_offset = 146800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 51b, mft_size = 12d10
data_offset = 146c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 51b
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 51c, mft_size = 12d10
data_offset = 147000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 51d, mft_size = 12d10
data_offset = 147400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =

12:31:52 12:31:52 = 4b44000


12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000

Reading MFT entry. number = 51e, mft_size = 12d10


data_offset = 147800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 51f, mft_size = 12d10
data_offset = 147c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 520, mft_size = 12d10
data_offset = 148000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 521, mft_size = 12d10
data_offset = 148400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 522, mft_size = 12d10
data_offset = 148800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 523, mft_size = 12d10
data_offset = 148c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 524, mft_size = 12d10
data_offset = 149000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 525, mft_size = 12d10
data_offset = 149400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 526, mft_size = 12d10
data_offset = 149800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 527, mft_size = 12d10
data_offset = 149c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 528, mft_size = 12d10
data_offset = 14a000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 529, mft_size = 12d10
data_offset = 14a400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =

12:31:52 12:31:52 = 4b44000


12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000

Reading MFT entry. number = 52a, mft_size = 12d10


data_offset = 14a800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 52b, mft_size = 12d10
data_offset = 14ac00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 52c, mft_size = 12d10
data_offset = 14b000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 52d, mft_size = 12d10
data_offset = 14b400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 52e, mft_size = 12d10
data_offset = 14b800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 52f, mft_size = 12d10
data_offset = 14bc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 530, mft_size = 12d10
data_offset = 14c000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 531, mft_size = 12d10
data_offset = 14c400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 532, mft_size = 12d10
data_offset = 14c800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 533, mft_size = 12d10
data_offset = 14cc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 534, mft_size = 12d10
data_offset = 14d000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 535, mft_size = 12d10
data_offset = 14d400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =

12:31:52 12:31:52 = 4b44000


12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 -

Reading MFT entry. number = 536, mft_size = 12d10


data_offset = 14d800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 536
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 537, mft_size = 12d10
data_offset = 14dc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 538, mft_size = 12d10
data_offset = 14e000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 539, mft_size = 12d10
data_offset = 14e400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 53a, mft_size = 12d10
data_offset = 14e800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 53b, mft_size = 12d10
data_offset = 14ec00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 53c, mft_size = 12d10
data_offset = 14f000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 53d, mft_size = 12d10
data_offset = 14f400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 53e, mft_size = 12d10
data_offset = 14f800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 53f, mft_size = 12d10
data_offset = 14fc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 540, mft_size = 12d10
data_offset = 150000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 541, mft_size = 12d10

12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 -

data_offset = 150400, data_size = 400, file_size


cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 542, mft_size = 12d10
data_offset = 150800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 543, mft_size = 12d10
data_offset = 150c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 544, mft_size = 12d10
data_offset = 151000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 545, mft_size = 12d10
data_offset = 151400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 546, mft_size = 12d10
data_offset = 151800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 547, mft_size = 12d10
data_offset = 151c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 548, mft_size = 12d10
data_offset = 152000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 549, mft_size = 12d10
data_offset = 152400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 54a, mft_size = 12d10
data_offset = 152800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 54b, mft_size = 12d10
data_offset = 152c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 54c, mft_size = 12d10
data_offset = 153000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 54d, mft_size = 12d10

12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 -

data_offset = 153400, data_size = 400, file_size


cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 54e, mft_size = 12d10
data_offset = 153800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 54f, mft_size = 12d10
data_offset = 153c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 550, mft_size = 12d10
data_offset = 154000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 551, mft_size = 12d10
data_offset = 154400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 552, mft_size = 12d10
data_offset = 154800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 553, mft_size = 12d10
data_offset = 154c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 554, mft_size = 12d10
data_offset = 155000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 555, mft_size = 12d10
data_offset = 155400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 556, mft_size = 12d10
data_offset = 155800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 557, mft_size = 12d10
data_offset = 155c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 558, mft_size = 12d10
data_offset = 156000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 559, mft_size = 12d10

12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 -

data_offset = 156400, data_size = 400, file_size


cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 55a, mft_size = 12d10
data_offset = 156800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 55b, mft_size = 12d10
data_offset = 156c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 55c, mft_size = 12d10
data_offset = 157000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 55d, mft_size = 12d10
data_offset = 157400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 55e, mft_size = 12d10
data_offset = 157800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 55f, mft_size = 12d10
data_offset = 157c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 560, mft_size = 12d10
data_offset = 158000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 561, mft_size = 12d10
data_offset = 158400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 562, mft_size = 12d10
data_offset = 158800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 563, mft_size = 12d10
data_offset = 158c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 564, mft_size = 12d10
data_offset = 159000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 565, mft_size = 12d10

12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 -

data_offset = 159400, data_size = 400, file_size


cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 566, mft_size = 12d10
data_offset = 159800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 567, mft_size = 12d10
data_offset = 159c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 568, mft_size = 12d10
data_offset = 15a000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 569, mft_size = 12d10
data_offset = 15a400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 56a, mft_size = 12d10
data_offset = 15a800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 56b, mft_size = 12d10
data_offset = 15ac00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 56c, mft_size = 12d10
data_offset = 15b000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 56d, mft_size = 12d10
data_offset = 15b400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 56e, mft_size = 12d10
data_offset = 15b800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 56f, mft_size = 12d10
data_offset = 15bc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 570, mft_size = 12d10
data_offset = 15c000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 571, mft_size = 12d10

12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 -

data_offset = 15c400, data_size = 400, file_size


cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 572, mft_size = 12d10
data_offset = 15c800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 573, mft_size = 12d10
data_offset = 15cc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 574, mft_size = 12d10
data_offset = 15d000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 575, mft_size = 12d10
data_offset = 15d400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 576, mft_size = 12d10
data_offset = 15d800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 577, mft_size = 12d10
data_offset = 15dc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 578, mft_size = 12d10
data_offset = 15e000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 579, mft_size = 12d10
data_offset = 15e400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 57a, mft_size = 12d10
data_offset = 15e800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 57b, mft_size = 12d10
data_offset = 15ec00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 57c, mft_size = 12d10
data_offset = 15f000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 57d, mft_size = 12d10

12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 -

data_offset = 15f400, data_size = 400, file_size


cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 57e, mft_size = 12d10
data_offset = 15f800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 57f, mft_size = 12d10
data_offset = 15fc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 580, mft_size = 12d10
data_offset = 160000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 581, mft_size = 12d10
data_offset = 160400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 582, mft_size = 12d10
data_offset = 160800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 583, mft_size = 12d10
data_offset = 160c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 584, mft_size = 12d10
data_offset = 161000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 585, mft_size = 12d10
data_offset = 161400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 586, mft_size = 12d10
data_offset = 161800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 587, mft_size = 12d10
data_offset = 161c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 588, mft_size = 12d10
data_offset = 162000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 589, mft_size = 12d10

12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 -

data_offset = 162400, data_size = 400, file_size


cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 58a, mft_size = 12d10
data_offset = 162800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 58b, mft_size = 12d10
data_offset = 162c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 58c, mft_size = 12d10
data_offset = 163000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 58d, mft_size = 12d10
data_offset = 163400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 58e, mft_size = 12d10
data_offset = 163800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 58f, mft_size = 12d10
data_offset = 163c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 590, mft_size = 12d10
data_offset = 164000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 591, mft_size = 12d10
data_offset = 164400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 592, mft_size = 12d10
data_offset = 164800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 593, mft_size = 12d10
data_offset = 164c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 594, mft_size = 12d10
data_offset = 165000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 595, mft_size = 12d10

12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 -

data_offset = 165400, data_size = 400, file_size


cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 596, mft_size = 12d10
data_offset = 165800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 597, mft_size = 12d10
data_offset = 165c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 598, mft_size = 12d10
data_offset = 166000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 599, mft_size = 12d10
data_offset = 166400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 59a, mft_size = 12d10
data_offset = 166800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 59a
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 59b, mft_size = 12d10
data_offset = 166c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 59c, mft_size = 12d10
data_offset = 167000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 59d, mft_size = 12d10
data_offset = 167400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 59e, mft_size = 12d10
data_offset = 167800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 59f, mft_size = 12d10
data_offset = 167c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 5a0, mft_size = 12d10
data_offset = 168000, data_size = 400, file_size

= 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd

cache = 1550020, cache_offset = 0, cache_size =


Reading MFT entry. number = 5a1, mft_size = 12d10
data_offset = 168400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 5a2, mft_size = 12d10
data_offset = 168800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 5a3, mft_size = 12d10
data_offset = 168c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 5a4, mft_size = 12d10
data_offset = 169000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 5a5, mft_size = 12d10
data_offset = 169400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 5a6, mft_size = 12d10
data_offset = 169800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 5a7, mft_size = 12d10
data_offset = 169c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 5a8, mft_size = 12d10
data_offset = 16a000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 5a9, mft_size = 12d10
data_offset = 16a400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 5aa, mft_size = 12d10
data_offset = 16a800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 5ab, mft_size = 12d10
data_offset = 16ac00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou

12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000


12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000

CMFTEntry: MFT entry number 5ab


CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 5ac, mft_size = 12d10
data_offset = 16b000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 5ad, mft_size = 12d10
data_offset = 16b400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 5ae, mft_size = 12d10
data_offset = 16b800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 5af, mft_size = 12d10
data_offset = 16bc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 5b0, mft_size = 12d10
data_offset = 16c000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 5b1, mft_size = 12d10
data_offset = 16c400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 5b2, mft_size = 12d10
data_offset = 16c800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 5b3, mft_size = 12d10
data_offset = 16cc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 5b4, mft_size = 12d10
data_offset = 16d000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 5b5, mft_size = 12d10
data_offset = 16d400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 5b6, mft_size = 12d10
data_offset = 16d800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 5b7, mft_size = 12d10
data_offset = 16dc00, data_size = 400, file_size

12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000

cache = 1550020, cache_offset = 0, cache_size =


Reading MFT entry. number = 5b8, mft_size = 12d10
data_offset = 16e000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 5b9, mft_size = 12d10
data_offset = 16e400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 5ba, mft_size = 12d10
data_offset = 16e800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 5bb, mft_size = 12d10
data_offset = 16ec00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 5bc, mft_size = 12d10
data_offset = 16f000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 5bd, mft_size = 12d10
data_offset = 16f400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 5be, mft_size = 12d10
data_offset = 16f800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 5bf, mft_size = 12d10
data_offset = 16fc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 5c0, mft_size = 12d10
data_offset = 170000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 5c1, mft_size = 12d10
data_offset = 170400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 5c2, mft_size = 12d10
data_offset = 170800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 5c3, mft_size = 12d10
data_offset = 170c00, data_size = 400, file_size

12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000

cache = 1550020, cache_offset = 0, cache_size =


Reading MFT entry. number = 5c4, mft_size = 12d10
data_offset = 171000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 5c5, mft_size = 12d10
data_offset = 171400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 5c6, mft_size = 12d10
data_offset = 171800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 5c7, mft_size = 12d10
data_offset = 171c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 5c8, mft_size = 12d10
data_offset = 172000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 5c9, mft_size = 12d10
data_offset = 172400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 5ca, mft_size = 12d10
data_offset = 172800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 5cb, mft_size = 12d10
data_offset = 172c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 5cc, mft_size = 12d10
data_offset = 173000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 5cd, mft_size = 12d10
data_offset = 173400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 5ce, mft_size = 12d10
data_offset = 173800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 5cf, mft_size = 12d10
data_offset = 173c00, data_size = 400, file_size

12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 -

cache = 1550020, cache_offset = 0, cache_size =


Reading MFT entry. number = 5d0, mft_size = 12d10
data_offset = 174000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 5d1, mft_size = 12d10
data_offset = 174400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 5d2, mft_size = 12d10
data_offset = 174800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 5d3, mft_size = 12d10
data_offset = 174c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 5d4, mft_size = 12d10
data_offset = 175000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 5d5, mft_size = 12d10
data_offset = 175400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 5d6, mft_size = 12d10
data_offset = 175800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 5d6
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 5d7, mft_size = 12d10
data_offset = 175c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 5d8, mft_size = 12d10
data_offset = 176000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 5d9, mft_size = 12d10
data_offset = 176400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 5da, mft_size = 12d10
data_offset = 176800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =

400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 -

Reading MFT entry. number = 5db, mft_size = 12d10


data_offset = 176c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 5dc, mft_size = 12d10
data_offset = 177000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 5dd, mft_size = 12d10
data_offset = 177400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 5de, mft_size = 12d10
data_offset = 177800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 5df, mft_size = 12d10
data_offset = 177c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 5e0, mft_size = 12d10
data_offset = 178000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 5e1, mft_size = 12d10
data_offset = 178400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 5e2, mft_size = 12d10
data_offset = 178800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 5e3, mft_size = 12d10
data_offset = 178c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 5e4, mft_size = 12d10
data_offset = 179000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 5e5, mft_size = 12d10
data_offset = 179400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 5e6, mft_size = 12d10
data_offset = 179800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =

400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 -

Reading MFT entry. number = 5e7, mft_size = 12d10


data_offset = 179c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 5e8, mft_size = 12d10
data_offset = 17a000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 5e9, mft_size = 12d10
data_offset = 17a400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 5ea, mft_size = 12d10
data_offset = 17a800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 5eb, mft_size = 12d10
data_offset = 17ac00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 5ec, mft_size = 12d10
data_offset = 17b000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 5ed, mft_size = 12d10
data_offset = 17b400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 5ee, mft_size = 12d10
data_offset = 17b800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 5ef, mft_size = 12d10
data_offset = 17bc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 5f0, mft_size = 12d10
data_offset = 17c000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 5f1, mft_size = 12d10
data_offset = 17c400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 5f2, mft_size = 12d10
data_offset = 17c800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =

400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000

Reading MFT entry. number = 5f3, mft_size = 12d10


data_offset = 17cc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 5f4, mft_size = 12d10
data_offset = 17d000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 5f5, mft_size = 12d10
data_offset = 17d400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 5f5
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 5f6, mft_size = 12d10
data_offset = 17d800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 5f7, mft_size = 12d10
data_offset = 17dc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 5f8, mft_size = 12d10
data_offset = 17e000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 5f9, mft_size = 12d10
data_offset = 17e400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 5fa, mft_size = 12d10
data_offset = 17e800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 5fb, mft_size = 12d10
data_offset = 17ec00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 5fc, mft_size = 12d10
data_offset = 17f000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 5fd, mft_size = 12d10
data_offset = 17f400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =

12:31:52 12:31:52 = 4b44000


12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 -

Reading MFT entry. number = 5fe, mft_size = 12d10


data_offset = 17f800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 5ff, mft_size = 12d10
data_offset = 17fc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 600, mft_size = 12d10
data_offset = 180000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 601, mft_size = 12d10
data_offset = 180400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 602, mft_size = 12d10
data_offset = 180800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 603, mft_size = 12d10
data_offset = 180c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 604, mft_size = 12d10
data_offset = 181000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 604
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 605, mft_size = 12d10
data_offset = 181400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 606, mft_size = 12d10
data_offset = 181800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 607, mft_size = 12d10
data_offset = 181c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 608, mft_size = 12d10
data_offset = 182000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 609, mft_size = 12d10

12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 -

data_offset = 182400, data_size = 400, file_size


cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 60a, mft_size = 12d10
data_offset = 182800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 60b, mft_size = 12d10
data_offset = 182c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 60c, mft_size = 12d10
data_offset = 183000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 60d, mft_size = 12d10
data_offset = 183400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 60e, mft_size = 12d10
data_offset = 183800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 60f, mft_size = 12d10
data_offset = 183c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 610, mft_size = 12d10
data_offset = 184000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 611, mft_size = 12d10
data_offset = 184400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 612, mft_size = 12d10
data_offset = 184800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 613, mft_size = 12d10
data_offset = 184c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 614, mft_size = 12d10
data_offset = 185000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 615, mft_size = 12d10

12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 -

data_offset = 185400, data_size = 400, file_size


cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 616, mft_size = 12d10
data_offset = 185800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 617, mft_size = 12d10
data_offset = 185c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 618, mft_size = 12d10
data_offset = 186000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 619, mft_size = 12d10
data_offset = 186400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 61a, mft_size = 12d10
data_offset = 186800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 61b, mft_size = 12d10
data_offset = 186c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 61c, mft_size = 12d10
data_offset = 187000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 61d, mft_size = 12d10
data_offset = 187400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 61e, mft_size = 12d10
data_offset = 187800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 61f, mft_size = 12d10
data_offset = 187c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 620, mft_size = 12d10
data_offset = 188000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 621, mft_size = 12d10

12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 -

data_offset = 188400, data_size = 400, file_size


cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 622, mft_size = 12d10
data_offset = 188800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 623, mft_size = 12d10
data_offset = 188c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 624, mft_size = 12d10
data_offset = 189000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 625, mft_size = 12d10
data_offset = 189400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 626, mft_size = 12d10
data_offset = 189800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 627, mft_size = 12d10
data_offset = 189c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 628, mft_size = 12d10
data_offset = 18a000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 629, mft_size = 12d10
data_offset = 18a400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 62a, mft_size = 12d10
data_offset = 18a800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 62b, mft_size = 12d10
data_offset = 18ac00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 62c, mft_size = 12d10
data_offset = 18b000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 62d, mft_size = 12d10

12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 -

data_offset = 18b400, data_size = 400, file_size


cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 62e, mft_size = 12d10
data_offset = 18b800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 62f, mft_size = 12d10
data_offset = 18bc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 630, mft_size = 12d10
data_offset = 18c000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 631, mft_size = 12d10
data_offset = 18c400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 632, mft_size = 12d10
data_offset = 18c800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 633, mft_size = 12d10
data_offset = 18cc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 634, mft_size = 12d10
data_offset = 18d000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 635, mft_size = 12d10
data_offset = 18d400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 636, mft_size = 12d10
data_offset = 18d800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 637, mft_size = 12d10
data_offset = 18dc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 638, mft_size = 12d10
data_offset = 18e000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 639, mft_size = 12d10

12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 -

data_offset = 18e400, data_size = 400, file_size


cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 63a, mft_size = 12d10
data_offset = 18e800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 63b, mft_size = 12d10
data_offset = 18ec00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 63c, mft_size = 12d10
data_offset = 18f000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 63d, mft_size = 12d10
data_offset = 18f400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 63e, mft_size = 12d10
data_offset = 18f800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 63f, mft_size = 12d10
data_offset = 18fc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 640, mft_size = 12d10
data_offset = 190000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 641, mft_size = 12d10
data_offset = 190400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 642, mft_size = 12d10
data_offset = 190800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 643, mft_size = 12d10
data_offset = 190c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 644, mft_size = 12d10
data_offset = 191000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 645, mft_size = 12d10

12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 -

data_offset = 191400, data_size = 400, file_size


cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 646, mft_size = 12d10
data_offset = 191800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 647, mft_size = 12d10
data_offset = 191c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 648, mft_size = 12d10
data_offset = 192000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 649, mft_size = 12d10
data_offset = 192400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 64a, mft_size = 12d10
data_offset = 192800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 64b, mft_size = 12d10
data_offset = 192c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 64c, mft_size = 12d10
data_offset = 193000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 64d, mft_size = 12d10
data_offset = 193400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 64e, mft_size = 12d10
data_offset = 193800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 64f, mft_size = 12d10
data_offset = 193c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 650, mft_size = 12d10
data_offset = 194000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 651, mft_size = 12d10

12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 -

data_offset = 194400, data_size = 400, file_size


cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 652, mft_size = 12d10
data_offset = 194800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 653, mft_size = 12d10
data_offset = 194c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 654, mft_size = 12d10
data_offset = 195000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 655, mft_size = 12d10
data_offset = 195400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 656, mft_size = 12d10
data_offset = 195800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 657, mft_size = 12d10
data_offset = 195c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 658, mft_size = 12d10
data_offset = 196000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 659, mft_size = 12d10
data_offset = 196400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 65a, mft_size = 12d10
data_offset = 196800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 65b, mft_size = 12d10
data_offset = 196c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 65c, mft_size = 12d10
data_offset = 197000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 65d, mft_size = 12d10

12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 -

data_offset = 197400, data_size = 400, file_size


cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 65e, mft_size = 12d10
data_offset = 197800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 65f, mft_size = 12d10
data_offset = 197c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 660, mft_size = 12d10
data_offset = 198000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 661, mft_size = 12d10
data_offset = 198400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 662, mft_size = 12d10
data_offset = 198800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 663, mft_size = 12d10
data_offset = 198c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 664, mft_size = 12d10
data_offset = 199000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 665, mft_size = 12d10
data_offset = 199400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 666, mft_size = 12d10
data_offset = 199800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 667, mft_size = 12d10
data_offset = 199c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 668, mft_size = 12d10
data_offset = 19a000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 669, mft_size = 12d10

12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 -

data_offset = 19a400, data_size = 400, file_size


cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 66a, mft_size = 12d10
data_offset = 19a800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 66b, mft_size = 12d10
data_offset = 19ac00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 66c, mft_size = 12d10
data_offset = 19b000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 66d, mft_size = 12d10
data_offset = 19b400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 66e, mft_size = 12d10
data_offset = 19b800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 66f, mft_size = 12d10
data_offset = 19bc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 670, mft_size = 12d10
data_offset = 19c000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 671, mft_size = 12d10
data_offset = 19c400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 672, mft_size = 12d10
data_offset = 19c800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 673, mft_size = 12d10
data_offset = 19cc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 674, mft_size = 12d10
data_offset = 19d000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 675, mft_size = 12d10

12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 -

data_offset = 19d400, data_size = 400, file_size


cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 676, mft_size = 12d10
data_offset = 19d800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 677, mft_size = 12d10
data_offset = 19dc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 678, mft_size = 12d10
data_offset = 19e000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 679, mft_size = 12d10
data_offset = 19e400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 67a, mft_size = 12d10
data_offset = 19e800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 67b, mft_size = 12d10
data_offset = 19ec00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 67c, mft_size = 12d10
data_offset = 19f000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 67d, mft_size = 12d10
data_offset = 19f400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 67e, mft_size = 12d10
data_offset = 19f800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 67f, mft_size = 12d10
data_offset = 19fc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 680, mft_size = 12d10
data_offset = 1a0000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 681, mft_size = 12d10

12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 -

data_offset = 1a0400, data_size = 400, file_size


cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 682, mft_size = 12d10
data_offset = 1a0800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 683, mft_size = 12d10
data_offset = 1a0c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 684, mft_size = 12d10
data_offset = 1a1000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 685, mft_size = 12d10
data_offset = 1a1400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 686, mft_size = 12d10
data_offset = 1a1800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 687, mft_size = 12d10
data_offset = 1a1c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 688, mft_size = 12d10
data_offset = 1a2000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 689, mft_size = 12d10
data_offset = 1a2400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 68a, mft_size = 12d10
data_offset = 1a2800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 68b, mft_size = 12d10
data_offset = 1a2c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 68c, mft_size = 12d10
data_offset = 1a3000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 68d, mft_size = 12d10

12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 -

data_offset = 1a3400, data_size = 400, file_size


cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 68e, mft_size = 12d10
data_offset = 1a3800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 68f, mft_size = 12d10
data_offset = 1a3c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 690, mft_size = 12d10
data_offset = 1a4000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 691, mft_size = 12d10
data_offset = 1a4400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 692, mft_size = 12d10
data_offset = 1a4800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 693, mft_size = 12d10
data_offset = 1a4c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 694, mft_size = 12d10
data_offset = 1a5000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 695, mft_size = 12d10
data_offset = 1a5400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 696, mft_size = 12d10
data_offset = 1a5800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 697, mft_size = 12d10
data_offset = 1a5c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 698, mft_size = 12d10
data_offset = 1a6000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 699, mft_size = 12d10

12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 -

data_offset = 1a6400, data_size = 400, file_size


cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 69a, mft_size = 12d10
data_offset = 1a6800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 69b, mft_size = 12d10
data_offset = 1a6c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 69c, mft_size = 12d10
data_offset = 1a7000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 69d, mft_size = 12d10
data_offset = 1a7400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 69e, mft_size = 12d10
data_offset = 1a7800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 69f, mft_size = 12d10
data_offset = 1a7c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 6a0, mft_size = 12d10
data_offset = 1a8000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 6a1, mft_size = 12d10
data_offset = 1a8400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 6a2, mft_size = 12d10
data_offset = 1a8800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 6a3, mft_size = 12d10
data_offset = 1a8c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 6a4, mft_size = 12d10
data_offset = 1a9000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 6a5, mft_size = 12d10

12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 -

data_offset = 1a9400, data_size = 400, file_size


cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 6a6, mft_size = 12d10
data_offset = 1a9800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 6a7, mft_size = 12d10
data_offset = 1a9c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 6a8, mft_size = 12d10
data_offset = 1aa000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 6a9, mft_size = 12d10
data_offset = 1aa400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 6aa, mft_size = 12d10
data_offset = 1aa800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 6ab, mft_size = 12d10
data_offset = 1aac00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 6ac, mft_size = 12d10
data_offset = 1ab000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 6ad, mft_size = 12d10
data_offset = 1ab400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 6ae, mft_size = 12d10
data_offset = 1ab800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 6af, mft_size = 12d10
data_offset = 1abc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 6b0, mft_size = 12d10
data_offset = 1ac000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 6b1, mft_size = 12d10

12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 -

data_offset = 1ac400, data_size = 400, file_size


cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 6b2, mft_size = 12d10
data_offset = 1ac800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 6b3, mft_size = 12d10
data_offset = 1acc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 6b4, mft_size = 12d10
data_offset = 1ad000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 6b5, mft_size = 12d10
data_offset = 1ad400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 6b6, mft_size = 12d10
data_offset = 1ad800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 6b7, mft_size = 12d10
data_offset = 1adc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 6b8, mft_size = 12d10
data_offset = 1ae000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 6b9, mft_size = 12d10
data_offset = 1ae400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 6ba, mft_size = 12d10
data_offset = 1ae800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 6bb, mft_size = 12d10
data_offset = 1aec00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 6bc, mft_size = 12d10
data_offset = 1af000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 6bd, mft_size = 12d10

12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 -

data_offset = 1af400, data_size = 400, file_size


cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 6be, mft_size = 12d10
data_offset = 1af800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 6bf, mft_size = 12d10
data_offset = 1afc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 6c0, mft_size = 12d10
data_offset = 1b0000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 6c1, mft_size = 12d10
data_offset = 1b0400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 6c2, mft_size = 12d10
data_offset = 1b0800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 6c3, mft_size = 12d10
data_offset = 1b0c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 6c4, mft_size = 12d10
data_offset = 1b1000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 6c5, mft_size = 12d10
data_offset = 1b1400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 6c6, mft_size = 12d10
data_offset = 1b1800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 6c7, mft_size = 12d10
data_offset = 1b1c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 6c8, mft_size = 12d10
data_offset = 1b2000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 6c9, mft_size = 12d10

12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 -

data_offset = 1b2400, data_size = 400, file_size


cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 6ca, mft_size = 12d10
data_offset = 1b2800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 6cb, mft_size = 12d10
data_offset = 1b2c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 6cc, mft_size = 12d10
data_offset = 1b3000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 6cd, mft_size = 12d10
data_offset = 1b3400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 6ce, mft_size = 12d10
data_offset = 1b3800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 6cf, mft_size = 12d10
data_offset = 1b3c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 6d0, mft_size = 12d10
data_offset = 1b4000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 6d1, mft_size = 12d10
data_offset = 1b4400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 6d2, mft_size = 12d10
data_offset = 1b4800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 6d3, mft_size = 12d10
data_offset = 1b4c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 6d4, mft_size = 12d10
data_offset = 1b5000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 6d5, mft_size = 12d10

12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 -

data_offset = 1b5400, data_size = 400, file_size


cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 6d6, mft_size = 12d10
data_offset = 1b5800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 6d7, mft_size = 12d10
data_offset = 1b5c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 6d8, mft_size = 12d10
data_offset = 1b6000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 6d9, mft_size = 12d10
data_offset = 1b6400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 6da, mft_size = 12d10
data_offset = 1b6800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 6db, mft_size = 12d10
data_offset = 1b6c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 6dc, mft_size = 12d10
data_offset = 1b7000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 6dd, mft_size = 12d10
data_offset = 1b7400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 6de, mft_size = 12d10
data_offset = 1b7800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 6df, mft_size = 12d10
data_offset = 1b7c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 6e0, mft_size = 12d10
data_offset = 1b8000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 6e1, mft_size = 12d10

12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 -

data_offset = 1b8400, data_size = 400, file_size


cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 6e2, mft_size = 12d10
data_offset = 1b8800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 6e3, mft_size = 12d10
data_offset = 1b8c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 6e4, mft_size = 12d10
data_offset = 1b9000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 6e5, mft_size = 12d10
data_offset = 1b9400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 6e6, mft_size = 12d10
data_offset = 1b9800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 6e7, mft_size = 12d10
data_offset = 1b9c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 6e8, mft_size = 12d10
data_offset = 1ba000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 6e9, mft_size = 12d10
data_offset = 1ba400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 6ea, mft_size = 12d10
data_offset = 1ba800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 6eb, mft_size = 12d10
data_offset = 1bac00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 6ec, mft_size = 12d10
data_offset = 1bb000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 6ed, mft_size = 12d10

12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 -

data_offset = 1bb400, data_size = 400, file_size


cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 6ee, mft_size = 12d10
data_offset = 1bb800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 6ef, mft_size = 12d10
data_offset = 1bbc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 6f0, mft_size = 12d10
data_offset = 1bc000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 6f1, mft_size = 12d10
data_offset = 1bc400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 6f2, mft_size = 12d10
data_offset = 1bc800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 6f3, mft_size = 12d10
data_offset = 1bcc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 6f4, mft_size = 12d10
data_offset = 1bd000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 6f5, mft_size = 12d10
data_offset = 1bd400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 6f6, mft_size = 12d10
data_offset = 1bd800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 6f7, mft_size = 12d10
data_offset = 1bdc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 6f8, mft_size = 12d10
data_offset = 1be000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 6f9, mft_size = 12d10

12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 -

data_offset = 1be400, data_size = 400, file_size


cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 6fa, mft_size = 12d10
data_offset = 1be800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 6fb, mft_size = 12d10
data_offset = 1bec00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 6fc, mft_size = 12d10
data_offset = 1bf000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 6fd, mft_size = 12d10
data_offset = 1bf400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 6fe, mft_size = 12d10
data_offset = 1bf800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 6ff, mft_size = 12d10
data_offset = 1bfc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 700, mft_size = 12d10
data_offset = 1c0000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 701, mft_size = 12d10
data_offset = 1c0400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 702, mft_size = 12d10
data_offset = 1c0800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 703, mft_size = 12d10
data_offset = 1c0c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 704, mft_size = 12d10
data_offset = 1c1000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 705, mft_size = 12d10

12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 -

data_offset = 1c1400, data_size = 400, file_size


cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 706, mft_size = 12d10
data_offset = 1c1800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 707, mft_size = 12d10
data_offset = 1c1c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 708, mft_size = 12d10
data_offset = 1c2000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 709, mft_size = 12d10
data_offset = 1c2400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 70a, mft_size = 12d10
data_offset = 1c2800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 70b, mft_size = 12d10
data_offset = 1c2c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 70c, mft_size = 12d10
data_offset = 1c3000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 70d, mft_size = 12d10
data_offset = 1c3400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 70e, mft_size = 12d10
data_offset = 1c3800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 70f, mft_size = 12d10
data_offset = 1c3c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 710, mft_size = 12d10
data_offset = 1c4000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 711, mft_size = 12d10

12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 -

data_offset = 1c4400, data_size = 400, file_size


cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 712, mft_size = 12d10
data_offset = 1c4800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 713, mft_size = 12d10
data_offset = 1c4c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 714, mft_size = 12d10
data_offset = 1c5000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 715, mft_size = 12d10
data_offset = 1c5400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 716, mft_size = 12d10
data_offset = 1c5800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 717, mft_size = 12d10
data_offset = 1c5c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 718, mft_size = 12d10
data_offset = 1c6000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 719, mft_size = 12d10
data_offset = 1c6400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 71a, mft_size = 12d10
data_offset = 1c6800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 71b, mft_size = 12d10
data_offset = 1c6c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 71c, mft_size = 12d10
data_offset = 1c7000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 71d, mft_size = 12d10

12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 -

data_offset = 1c7400, data_size = 400, file_size


cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 71e, mft_size = 12d10
data_offset = 1c7800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 71f, mft_size = 12d10
data_offset = 1c7c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 720, mft_size = 12d10
data_offset = 1c8000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 721, mft_size = 12d10
data_offset = 1c8400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 722, mft_size = 12d10
data_offset = 1c8800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 723, mft_size = 12d10
data_offset = 1c8c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 724, mft_size = 12d10
data_offset = 1c9000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 725, mft_size = 12d10
data_offset = 1c9400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 726, mft_size = 12d10
data_offset = 1c9800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 727, mft_size = 12d10
data_offset = 1c9c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 728, mft_size = 12d10
data_offset = 1ca000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 729, mft_size = 12d10

12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 -

data_offset = 1ca400, data_size = 400, file_size


cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 72a, mft_size = 12d10
data_offset = 1ca800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 72b, mft_size = 12d10
data_offset = 1cac00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 72c, mft_size = 12d10
data_offset = 1cb000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 72d, mft_size = 12d10
data_offset = 1cb400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 72e, mft_size = 12d10
data_offset = 1cb800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 72f, mft_size = 12d10
data_offset = 1cbc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 730, mft_size = 12d10
data_offset = 1cc000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 731, mft_size = 12d10
data_offset = 1cc400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 732, mft_size = 12d10
data_offset = 1cc800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 733, mft_size = 12d10
data_offset = 1ccc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 734, mft_size = 12d10
data_offset = 1cd000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 735, mft_size = 12d10

12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 -

data_offset = 1cd400, data_size = 400, file_size


cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 736, mft_size = 12d10
data_offset = 1cd800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 737, mft_size = 12d10
data_offset = 1cdc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 738, mft_size = 12d10
data_offset = 1ce000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 739, mft_size = 12d10
data_offset = 1ce400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 73a, mft_size = 12d10
data_offset = 1ce800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 73b, mft_size = 12d10
data_offset = 1cec00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 73c, mft_size = 12d10
data_offset = 1cf000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 73d, mft_size = 12d10
data_offset = 1cf400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 73e, mft_size = 12d10
data_offset = 1cf800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 73f, mft_size = 12d10
data_offset = 1cfc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 740, mft_size = 12d10
data_offset = 1d0000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 741, mft_size = 12d10

12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 -

data_offset = 1d0400, data_size = 400, file_size


cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 742, mft_size = 12d10
data_offset = 1d0800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 743, mft_size = 12d10
data_offset = 1d0c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 744, mft_size = 12d10
data_offset = 1d1000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 745, mft_size = 12d10
data_offset = 1d1400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 746, mft_size = 12d10
data_offset = 1d1800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 747, mft_size = 12d10
data_offset = 1d1c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 748, mft_size = 12d10
data_offset = 1d2000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 749, mft_size = 12d10
data_offset = 1d2400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 74a, mft_size = 12d10
data_offset = 1d2800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 74b, mft_size = 12d10
data_offset = 1d2c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 74c, mft_size = 12d10
data_offset = 1d3000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 74d, mft_size = 12d10

12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 -

data_offset = 1d3400, data_size = 400, file_size


cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 74e, mft_size = 12d10
data_offset = 1d3800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 74f, mft_size = 12d10
data_offset = 1d3c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 750, mft_size = 12d10
data_offset = 1d4000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 751, mft_size = 12d10
data_offset = 1d4400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 752, mft_size = 12d10
data_offset = 1d4800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 753, mft_size = 12d10
data_offset = 1d4c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 754, mft_size = 12d10
data_offset = 1d5000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 755, mft_size = 12d10
data_offset = 1d5400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 756, mft_size = 12d10
data_offset = 1d5800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 757, mft_size = 12d10
data_offset = 1d5c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 758, mft_size = 12d10
data_offset = 1d6000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 759, mft_size = 12d10

12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 -

data_offset = 1d6400, data_size = 400, file_size


cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 75a, mft_size = 12d10
data_offset = 1d6800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 75b, mft_size = 12d10
data_offset = 1d6c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 75c, mft_size = 12d10
data_offset = 1d7000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 75d, mft_size = 12d10
data_offset = 1d7400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 75e, mft_size = 12d10
data_offset = 1d7800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 75f, mft_size = 12d10
data_offset = 1d7c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 760, mft_size = 12d10
data_offset = 1d8000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 761, mft_size = 12d10
data_offset = 1d8400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 762, mft_size = 12d10
data_offset = 1d8800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 763, mft_size = 12d10
data_offset = 1d8c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 764, mft_size = 12d10
data_offset = 1d9000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 765, mft_size = 12d10

12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 -

data_offset = 1d9400, data_size = 400, file_size


cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 766, mft_size = 12d10
data_offset = 1d9800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 767, mft_size = 12d10
data_offset = 1d9c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 768, mft_size = 12d10
data_offset = 1da000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 769, mft_size = 12d10
data_offset = 1da400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 76a, mft_size = 12d10
data_offset = 1da800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 76b, mft_size = 12d10
data_offset = 1dac00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 76c, mft_size = 12d10
data_offset = 1db000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 76d, mft_size = 12d10
data_offset = 1db400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 76e, mft_size = 12d10
data_offset = 1db800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 76f, mft_size = 12d10
data_offset = 1dbc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 770, mft_size = 12d10
data_offset = 1dc000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 771, mft_size = 12d10

12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 -

data_offset = 1dc400, data_size = 400, file_size


cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 772, mft_size = 12d10
data_offset = 1dc800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 773, mft_size = 12d10
data_offset = 1dcc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 774, mft_size = 12d10
data_offset = 1dd000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 775, mft_size = 12d10
data_offset = 1dd400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 776, mft_size = 12d10
data_offset = 1dd800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 777, mft_size = 12d10
data_offset = 1ddc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 778, mft_size = 12d10
data_offset = 1de000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 779, mft_size = 12d10
data_offset = 1de400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 77a, mft_size = 12d10
data_offset = 1de800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 77b, mft_size = 12d10
data_offset = 1dec00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 77c, mft_size = 12d10
data_offset = 1df000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 77d, mft_size = 12d10

12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 -

data_offset = 1df400, data_size = 400, file_size


cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 77e, mft_size = 12d10
data_offset = 1df800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 77f, mft_size = 12d10
data_offset = 1dfc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 780, mft_size = 12d10
data_offset = 1e0000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 781, mft_size = 12d10
data_offset = 1e0400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 782, mft_size = 12d10
data_offset = 1e0800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 783, mft_size = 12d10
data_offset = 1e0c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 784, mft_size = 12d10
data_offset = 1e1000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 785, mft_size = 12d10
data_offset = 1e1400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 786, mft_size = 12d10
data_offset = 1e1800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 787, mft_size = 12d10
data_offset = 1e1c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 788, mft_size = 12d10
data_offset = 1e2000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 789, mft_size = 12d10

12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 -

data_offset = 1e2400, data_size = 400, file_size


cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 78a, mft_size = 12d10
data_offset = 1e2800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 78b, mft_size = 12d10
data_offset = 1e2c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 78c, mft_size = 12d10
data_offset = 1e3000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 78d, mft_size = 12d10
data_offset = 1e3400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 78e, mft_size = 12d10
data_offset = 1e3800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 78f, mft_size = 12d10
data_offset = 1e3c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 790, mft_size = 12d10
data_offset = 1e4000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 791, mft_size = 12d10
data_offset = 1e4400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 792, mft_size = 12d10
data_offset = 1e4800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 793, mft_size = 12d10
data_offset = 1e4c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 794, mft_size = 12d10
data_offset = 1e5000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 795, mft_size = 12d10

12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 -

data_offset = 1e5400, data_size = 400, file_size


cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 796, mft_size = 12d10
data_offset = 1e5800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 797, mft_size = 12d10
data_offset = 1e5c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 798, mft_size = 12d10
data_offset = 1e6000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 799, mft_size = 12d10
data_offset = 1e6400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 79a, mft_size = 12d10
data_offset = 1e6800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 79b, mft_size = 12d10
data_offset = 1e6c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 79c, mft_size = 12d10
data_offset = 1e7000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 79d, mft_size = 12d10
data_offset = 1e7400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 79e, mft_size = 12d10
data_offset = 1e7800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 79f, mft_size = 12d10
data_offset = 1e7c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 7a0, mft_size = 12d10
data_offset = 1e8000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 7a1, mft_size = 12d10

12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 -

data_offset = 1e8400, data_size = 400, file_size


cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 7a2, mft_size = 12d10
data_offset = 1e8800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 7a3, mft_size = 12d10
data_offset = 1e8c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 7a4, mft_size = 12d10
data_offset = 1e9000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 7a5, mft_size = 12d10
data_offset = 1e9400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 7a6, mft_size = 12d10
data_offset = 1e9800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 7a7, mft_size = 12d10
data_offset = 1e9c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 7a8, mft_size = 12d10
data_offset = 1ea000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 7a9, mft_size = 12d10
data_offset = 1ea400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 7aa, mft_size = 12d10
data_offset = 1ea800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 7ab, mft_size = 12d10
data_offset = 1eac00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 7ac, mft_size = 12d10
data_offset = 1eb000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 7ad, mft_size = 12d10

12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 -

data_offset = 1eb400, data_size = 400, file_size


cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 7ae, mft_size = 12d10
data_offset = 1eb800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 7af, mft_size = 12d10
data_offset = 1ebc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 7b0, mft_size = 12d10
data_offset = 1ec000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 7b1, mft_size = 12d10
data_offset = 1ec400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 7b2, mft_size = 12d10
data_offset = 1ec800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 7b3, mft_size = 12d10
data_offset = 1ecc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 7b4, mft_size = 12d10
data_offset = 1ed000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 7b5, mft_size = 12d10
data_offset = 1ed400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 7b6, mft_size = 12d10
data_offset = 1ed800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 7b7, mft_size = 12d10
data_offset = 1edc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 7b8, mft_size = 12d10
data_offset = 1ee000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 7b9, mft_size = 12d10

12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 -

data_offset = 1ee400, data_size = 400, file_size


cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 7ba, mft_size = 12d10
data_offset = 1ee800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 7bb, mft_size = 12d10
data_offset = 1eec00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 7bc, mft_size = 12d10
data_offset = 1ef000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 7bd, mft_size = 12d10
data_offset = 1ef400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 7be, mft_size = 12d10
data_offset = 1ef800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 7bf, mft_size = 12d10
data_offset = 1efc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 7c0, mft_size = 12d10
data_offset = 1f0000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 7c1, mft_size = 12d10
data_offset = 1f0400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 7c2, mft_size = 12d10
data_offset = 1f0800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 7c3, mft_size = 12d10
data_offset = 1f0c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 7c4, mft_size = 12d10
data_offset = 1f1000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 7c5, mft_size = 12d10

12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 -

data_offset = 1f1400, data_size = 400, file_size


cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 7c6, mft_size = 12d10
data_offset = 1f1800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 7c7, mft_size = 12d10
data_offset = 1f1c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 7c8, mft_size = 12d10
data_offset = 1f2000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 7c9, mft_size = 12d10
data_offset = 1f2400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 7c9
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 7ca, mft_size = 12d10
data_offset = 1f2800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 7ca
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 7cb, mft_size = 12d10
data_offset = 1f2c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 7cc, mft_size = 12d10
data_offset = 1f3000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 7cd, mft_size = 12d10
data_offset = 1f3400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 7ce, mft_size = 12d10
data_offset = 1f3800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 7ce

12:31:52 12:31:52 12:31:52 = 4b44000


12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 -

CEFSContainer::AddFile: invalid File name. rc = 111


Reading MFT entry. number = 7cf, mft_size = 12d10
data_offset = 1f3c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 7d0, mft_size = 12d10
data_offset = 1f4000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 7d1, mft_size = 12d10
data_offset = 1f4400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 7d2, mft_size = 12d10
data_offset = 1f4800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 7d3, mft_size = 12d10
data_offset = 1f4c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 7d3
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 7d4, mft_size = 12d10
data_offset = 1f5000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 7d5, mft_size = 12d10
data_offset = 1f5400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 7d6, mft_size = 12d10
data_offset = 1f5800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 7d7, mft_size = 12d10
data_offset = 1f5c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 7d7
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 7d8, mft_size = 12d10
data_offset = 1f6000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou

nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 -

CMFTEntry: MFT entry number 7d8


CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 7d9, mft_size = 12d10
data_offset = 1f6400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 7d9
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 7da, mft_size = 12d10
data_offset = 1f6800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 7db, mft_size = 12d10
data_offset = 1f6c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 7dc, mft_size = 12d10
data_offset = 1f7000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 7dd, mft_size = 12d10
data_offset = 1f7400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 7dd
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 7de, mft_size = 12d10
data_offset = 1f7800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 7de
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 7df, mft_size = 12d10
data_offset = 1f7c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 7df
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 7e0, mft_size = 12d10
data_offset = 1f8000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou

nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd

CMFTEntry: MFT entry number 7e0


CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 7e1, mft_size = 12d10
data_offset = 1f8400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 7e1
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 7e2, mft_size = 12d10
data_offset = 1f8800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 7e2
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 7e3, mft_size = 12d10
data_offset = 1f8c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 7e4, mft_size = 12d10
data_offset = 1f9000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 7e4
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 7e5, mft_size = 12d10
data_offset = 1f9400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 7e5
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 7e6, mft_size = 12d10
data_offset = 1f9800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 7e6
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 7e7, mft_size = 12d10
data_offset = 1f9c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou

12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000


12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 -

CMFTEntry: MFT entry number 7e7


CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 7e8, mft_size = 12d10
data_offset = 1fa000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 7e8
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 7e9, mft_size = 12d10
data_offset = 1fa400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 7e9
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 7ea, mft_size = 12d10
data_offset = 1fa800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 7eb, mft_size = 12d10
data_offset = 1fac00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 7eb
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 7ec, mft_size = 12d10
data_offset = 1fb000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 7ec
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 7ed, mft_size = 12d10
data_offset = 1fb400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 7ee, mft_size = 12d10
data_offset = 1fb800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 7ef, mft_size = 12d10
data_offset = 1fbc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 7f0, mft_size = 12d10
data_offset = 1fc000, data_size = 400, file_size

= 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 -

cache = 1550020, cache_offset = 0, cache_size =


Reading MFT entry. number = 7f1, mft_size = 12d10
data_offset = 1fc400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 7f2, mft_size = 12d10
data_offset = 1fc800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 7f2
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 7f3, mft_size = 12d10
data_offset = 1fcc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 7f3
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 7f4, mft_size = 12d10
data_offset = 1fd000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 7f5, mft_size = 12d10
data_offset = 1fd400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 7f5
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 7f6, mft_size = 12d10
data_offset = 1fd800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 7f7, mft_size = 12d10
data_offset = 1fdc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 7f7
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 7f8, mft_size = 12d10
data_offset = 1fe000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou

nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 -

CMFTEntry: MFT entry number 7f8


CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 7f9, mft_size = 12d10
data_offset = 1fe400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 7fa, mft_size = 12d10
data_offset = 1fe800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 7fa
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 7fb, mft_size = 12d10
data_offset = 1fec00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 7fc, mft_size = 12d10
data_offset = 1ff000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 7fc
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 7fd, mft_size = 12d10
data_offset = 1ff400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 7fd
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 7fe, mft_size = 12d10
data_offset = 1ff800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 7fe
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 7ff, mft_size = 12d10
data_offset = 1ffc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 800, mft_size = 12d10
data_offset = 200000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 801, mft_size = 12d10

12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000

data_offset = 200400, data_size = 400, file_size


cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 802, mft_size = 12d10
data_offset = 200800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 802
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 803, mft_size = 12d10
data_offset = 200c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 803
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 804, mft_size = 12d10
data_offset = 201000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 804
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 805, mft_size = 12d10
data_offset = 201400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 805
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 806, mft_size = 12d10
data_offset = 201800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 807, mft_size = 12d10
data_offset = 201c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 808, mft_size = 12d10
data_offset = 202000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 809, mft_size = 12d10
data_offset = 202400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =

12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 -

CMFTEntry::GetFileName: $FILE_NAME attribute was not fou


CMFTEntry: MFT entry number 809
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 80a, mft_size = 12d10
data_offset = 202800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 80a
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 80b, mft_size = 12d10
data_offset = 202c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 80b
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 80c, mft_size = 12d10
data_offset = 203000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 80d, mft_size = 12d10
data_offset = 203400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 80e, mft_size = 12d10
data_offset = 203800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 80e
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 80f, mft_size = 12d10
data_offset = 203c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 80f
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 810, mft_size = 12d10
data_offset = 204000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 810
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 811, mft_size = 12d10

12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 -

data_offset = 204400, data_size = 400, file_size


cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 812, mft_size = 12d10
data_offset = 204800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 813, mft_size = 12d10
data_offset = 204c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 814, mft_size = 12d10
data_offset = 205000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 814
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 815, mft_size = 12d10
data_offset = 205400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 816, mft_size = 12d10
data_offset = 205800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 816
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 817, mft_size = 12d10
data_offset = 205c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 817
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 818, mft_size = 12d10
data_offset = 206000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 819, mft_size = 12d10
data_offset = 206400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 81a, mft_size = 12d10
data_offset = 206800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =

400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 -

CMFTEntry::GetFileName: $FILE_NAME attribute was not fou


CMFTEntry: MFT entry number 81a
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 81b, mft_size = 12d10
data_offset = 206c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 81c, mft_size = 12d10
data_offset = 207000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 81d, mft_size = 12d10
data_offset = 207400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 81e, mft_size = 12d10
data_offset = 207800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 81f, mft_size = 12d10
data_offset = 207c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 81f
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 820, mft_size = 12d10
data_offset = 208000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 820
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 821, mft_size = 12d10
data_offset = 208400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 821
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 822, mft_size = 12d10
data_offset = 208800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 822

12:31:52 12:31:52 12:31:52 = 4b44000


12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000

CEFSContainer::AddFile: invalid File name. rc = 111


Reading MFT entry. number = 823, mft_size = 12d10
data_offset = 208c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 823
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 824, mft_size = 12d10
data_offset = 209000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 824
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 825, mft_size = 12d10
data_offset = 209400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 826, mft_size = 12d10
data_offset = 209800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 826
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 827, mft_size = 12d10
data_offset = 209c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 828, mft_size = 12d10
data_offset = 20a000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 828
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 829, mft_size = 12d10
data_offset = 20a400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 82a, mft_size = 12d10
data_offset = 20a800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 82b, mft_size = 12d10
data_offset = 20ac00, data_size = 400, file_size

12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 -

cache = 1550020, cache_offset = 0, cache_size =


Reading MFT entry. number = 82c, mft_size = 12d10
data_offset = 20b000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 82c
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 82d, mft_size = 12d10
data_offset = 20b400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 82e, mft_size = 12d10
data_offset = 20b800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 82e
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 82f, mft_size = 12d10
data_offset = 20bc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 830, mft_size = 12d10
data_offset = 20c000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 831, mft_size = 12d10
data_offset = 20c400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 831
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 832, mft_size = 12d10
data_offset = 20c800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 833, mft_size = 12d10
data_offset = 20cc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 834, mft_size = 12d10
data_offset = 20d000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 835, mft_size = 12d10

12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 -

data_offset = 20d400, data_size = 400, file_size


cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 835
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 836, mft_size = 12d10
data_offset = 20d800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 837, mft_size = 12d10
data_offset = 20dc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 838, mft_size = 12d10
data_offset = 20e000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 838
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 839, mft_size = 12d10
data_offset = 20e400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 839
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 83a, mft_size = 12d10
data_offset = 20e800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 83a
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 83b, mft_size = 12d10
data_offset = 20ec00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 83b
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 83c, mft_size = 12d10
data_offset = 20f000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou

nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 -

CMFTEntry: MFT entry number 83c


CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 83d, mft_size = 12d10
data_offset = 20f400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 83e, mft_size = 12d10
data_offset = 20f800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 83f, mft_size = 12d10
data_offset = 20fc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 840, mft_size = 12d10
data_offset = 210000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 841, mft_size = 12d10
data_offset = 210400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 842, mft_size = 12d10
data_offset = 210800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 843, mft_size = 12d10
data_offset = 210c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 843
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 844, mft_size = 12d10
data_offset = 211000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 844
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 845, mft_size = 12d10
data_offset = 211400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 846, mft_size = 12d10
data_offset = 211800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =

400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000

CMFTEntry::GetFileName: $FILE_NAME attribute was not fou


CMFTEntry: MFT entry number 846
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 847, mft_size = 12d10
data_offset = 211c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 847
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 848, mft_size = 12d10
data_offset = 212000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 848
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 849, mft_size = 12d10
data_offset = 212400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 849
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 84a, mft_size = 12d10
data_offset = 212800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 84b, mft_size = 12d10
data_offset = 212c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 84b
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 84c, mft_size = 12d10
data_offset = 213000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 84c
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 84d, mft_size = 12d10
data_offset = 213400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =

12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000

CMFTEntry::GetFileName: $FILE_NAME attribute was not fou


CMFTEntry: MFT entry number 84d
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 84e, mft_size = 12d10
data_offset = 213800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 84f, mft_size = 12d10
data_offset = 213c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 84f
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 850, mft_size = 12d10
data_offset = 214000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 850
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 851, mft_size = 12d10
data_offset = 214400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 852, mft_size = 12d10
data_offset = 214800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 852
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 853, mft_size = 12d10
data_offset = 214c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 854, mft_size = 12d10
data_offset = 215000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 854
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 855, mft_size = 12d10
data_offset = 215400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =

12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 -

CMFTEntry::GetFileName: $FILE_NAME attribute was not fou


CMFTEntry: MFT entry number 855
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 856, mft_size = 12d10
data_offset = 215800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 856
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 857, mft_size = 12d10
data_offset = 215c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 857
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 858, mft_size = 12d10
data_offset = 216000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 858
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 859, mft_size = 12d10
data_offset = 216400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 859
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 85a, mft_size = 12d10
data_offset = 216800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 85a
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 85b, mft_size = 12d10
data_offset = 216c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 85c, mft_size = 12d10
data_offset = 217000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou

nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 -

CMFTEntry: MFT entry number 85c


CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 85d, mft_size = 12d10
data_offset = 217400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 85e, mft_size = 12d10
data_offset = 217800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 85e
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 85f, mft_size = 12d10
data_offset = 217c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 85f
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 860, mft_size = 12d10
data_offset = 218000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 860
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 861, mft_size = 12d10
data_offset = 218400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 861
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 862, mft_size = 12d10
data_offset = 218800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 863, mft_size = 12d10
data_offset = 218c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 863
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 864, mft_size = 12d10
data_offset = 219000, data_size = 400, file_size

= 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd

cache = 1550020, cache_offset = 0, cache_size =


CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 864
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 865, mft_size = 12d10
data_offset = 219400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 866, mft_size = 12d10
data_offset = 219800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 866
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 867, mft_size = 12d10
data_offset = 219c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 867
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 868, mft_size = 12d10
data_offset = 21a000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 869, mft_size = 12d10
data_offset = 21a400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 869
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 86a, mft_size = 12d10
data_offset = 21a800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 86a
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 86b, mft_size = 12d10
data_offset = 21ac00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou

12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000


12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000

CMFTEntry: MFT entry number 86b


CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 86c, mft_size = 12d10
data_offset = 21b000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 86d, mft_size = 12d10
data_offset = 21b400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 86d
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 86e, mft_size = 12d10
data_offset = 21b800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 86e
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 86f, mft_size = 12d10
data_offset = 21bc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 86f
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 870, mft_size = 12d10
data_offset = 21c000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 871, mft_size = 12d10
data_offset = 21c400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 871
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 872, mft_size = 12d10
data_offset = 21c800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 872
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 873, mft_size = 12d10
data_offset = 21cc00, data_size = 400, file_size

12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 -

cache = 1550020, cache_offset = 0, cache_size =


CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 873
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 874, mft_size = 12d10
data_offset = 21d000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 874
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 875, mft_size = 12d10
data_offset = 21d400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 875
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 876, mft_size = 12d10
data_offset = 21d800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 876
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 877, mft_size = 12d10
data_offset = 21dc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 878, mft_size = 12d10
data_offset = 21e000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 878
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 879, mft_size = 12d10
data_offset = 21e400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 87a, mft_size = 12d10
data_offset = 21e800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 87a

12:31:52 12:31:52 12:31:52 = 4b44000


12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 -

CEFSContainer::AddFile: invalid File name. rc = 111


Reading MFT entry. number = 87b, mft_size = 12d10
data_offset = 21ec00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 87c, mft_size = 12d10
data_offset = 21f000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 87c
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 87d, mft_size = 12d10
data_offset = 21f400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 87d
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 87e, mft_size = 12d10
data_offset = 21f800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 87e
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 87f, mft_size = 12d10
data_offset = 21fc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 87f
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 880, mft_size = 12d10
data_offset = 220000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 880
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 881, mft_size = 12d10
data_offset = 220400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 881
CEFSContainer::AddFile: invalid File name. rc = 111

12:31:52 12:31:52 = 4b44000


12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 -

Reading MFT entry. number = 882, mft_size = 12d10


data_offset = 220800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 882
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 883, mft_size = 12d10
data_offset = 220c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 883
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 884, mft_size = 12d10
data_offset = 221000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 884
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 885, mft_size = 12d10
data_offset = 221400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 885
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 886, mft_size = 12d10
data_offset = 221800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 886
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 887, mft_size = 12d10
data_offset = 221c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 887
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 888, mft_size = 12d10
data_offset = 222000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou

nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd

CMFTEntry: MFT entry number 888


CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 889, mft_size = 12d10
data_offset = 222400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 88a, mft_size = 12d10
data_offset = 222800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 88a
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 88b, mft_size = 12d10
data_offset = 222c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 88b
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 88c, mft_size = 12d10
data_offset = 223000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 88c
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 88d, mft_size = 12d10
data_offset = 223400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 88d
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 88e, mft_size = 12d10
data_offset = 223800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 88e
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 88f, mft_size = 12d10
data_offset = 223c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou

12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000


12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 -

CMFTEntry: MFT entry number 88f


CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 890, mft_size = 12d10
data_offset = 224000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 891, mft_size = 12d10
data_offset = 224400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 891
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 892, mft_size = 12d10
data_offset = 224800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 892
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 893, mft_size = 12d10
data_offset = 224c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 893
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 894, mft_size = 12d10
data_offset = 225000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 894
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 895, mft_size = 12d10
data_offset = 225400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 895
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 896, mft_size = 12d10
data_offset = 225800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 896

12:31:52 12:31:52 12:31:52 = 4b44000


12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 -

CEFSContainer::AddFile: invalid File name. rc = 111


Reading MFT entry. number = 897, mft_size = 12d10
data_offset = 225c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 897
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 898, mft_size = 12d10
data_offset = 226000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 898
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 899, mft_size = 12d10
data_offset = 226400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 899
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 89a, mft_size = 12d10
data_offset = 226800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 89b, mft_size = 12d10
data_offset = 226c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 89b
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 89c, mft_size = 12d10
data_offset = 227000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 89d, mft_size = 12d10
data_offset = 227400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 89d
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 89e, mft_size = 12d10
data_offset = 227800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =

400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 -

CMFTEntry::GetFileName: $FILE_NAME attribute was not fou


CMFTEntry: MFT entry number 89e
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 89f, mft_size = 12d10
data_offset = 227c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 89f
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 8a0, mft_size = 12d10
data_offset = 228000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 8a0
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 8a1, mft_size = 12d10
data_offset = 228400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 8a2, mft_size = 12d10
data_offset = 228800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 8a3, mft_size = 12d10
data_offset = 228c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 8a3
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 8a4, mft_size = 12d10
data_offset = 229000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 8a4
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 8a5, mft_size = 12d10
data_offset = 229400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 8a6, mft_size = 12d10
data_offset = 229800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =

400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000

CMFTEntry::GetFileName: $FILE_NAME attribute was not fou


CMFTEntry: MFT entry number 8a6
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 8a7, mft_size = 12d10
data_offset = 229c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 8a7
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 8a8, mft_size = 12d10
data_offset = 22a000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 8a8
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 8a9, mft_size = 12d10
data_offset = 22a400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 8a9
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 8aa, mft_size = 12d10
data_offset = 22a800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 8ab, mft_size = 12d10
data_offset = 22ac00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 8ab
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 8ac, mft_size = 12d10
data_offset = 22b000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 8ac
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 8ad, mft_size = 12d10
data_offset = 22b400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =

12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 -

CMFTEntry::GetFileName: $FILE_NAME attribute was not fou


CMFTEntry: MFT entry number 8ad
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 8ae, mft_size = 12d10
data_offset = 22b800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 8ae
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 8af, mft_size = 12d10
data_offset = 22bc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 8af
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 8b0, mft_size = 12d10
data_offset = 22c000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 8b0
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 8b1, mft_size = 12d10
data_offset = 22c400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 8b2, mft_size = 12d10
data_offset = 22c800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 8b2
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 8b3, mft_size = 12d10
data_offset = 22cc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 8b3
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 8b4, mft_size = 12d10
data_offset = 22d000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 8b5, mft_size = 12d10

12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 -

data_offset = 22d400, data_size = 400, file_size


cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 8b6, mft_size = 12d10
data_offset = 22d800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 8b6
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 8b7, mft_size = 12d10
data_offset = 22dc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 8b7
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 8b8, mft_size = 12d10
data_offset = 22e000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 8b9, mft_size = 12d10
data_offset = 22e400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 8b9
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 8ba, mft_size = 12d10
data_offset = 22e800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 8bb, mft_size = 12d10
data_offset = 22ec00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 8bc, mft_size = 12d10
data_offset = 22f000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 8bd, mft_size = 12d10
data_offset = 22f400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 8be, mft_size = 12d10
data_offset = 22f800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =

400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 -

Reading MFT entry. number = 8bf, mft_size = 12d10


data_offset = 22fc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 8c0, mft_size = 12d10
data_offset = 230000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 8c0
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 8c1, mft_size = 12d10
data_offset = 230400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 8c1
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 8c2, mft_size = 12d10
data_offset = 230800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 8c2
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 8c3, mft_size = 12d10
data_offset = 230c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 8c4, mft_size = 12d10
data_offset = 231000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 8c4
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 8c5, mft_size = 12d10
data_offset = 231400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 8c5
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 8c6, mft_size = 12d10
data_offset = 231800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =

400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000

CMFTEntry::GetFileName: $FILE_NAME attribute was not fou


CMFTEntry: MFT entry number 8c6
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 8c7, mft_size = 12d10
data_offset = 231c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 8c8, mft_size = 12d10
data_offset = 232000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 8c8
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 8c9, mft_size = 12d10
data_offset = 232400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 8c9
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 8ca, mft_size = 12d10
data_offset = 232800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 8ca
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 8cb, mft_size = 12d10
data_offset = 232c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 8cb
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 8cc, mft_size = 12d10
data_offset = 233000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 8cc
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 8cd, mft_size = 12d10
data_offset = 233400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =

12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 -

CMFTEntry::GetFileName: $FILE_NAME attribute was not fou


CMFTEntry: MFT entry number 8cd
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 8ce, mft_size = 12d10
data_offset = 233800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 8ce
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 8cf, mft_size = 12d10
data_offset = 233c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 8d0, mft_size = 12d10
data_offset = 234000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 8d0
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 8d1, mft_size = 12d10
data_offset = 234400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 8d1
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 8d2, mft_size = 12d10
data_offset = 234800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 8d2
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 8d3, mft_size = 12d10
data_offset = 234c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 8d3
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 8d4, mft_size = 12d10
data_offset = 235000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou

nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd

CMFTEntry: MFT entry number 8d4


CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 8d5, mft_size = 12d10
data_offset = 235400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 8d5
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 8d6, mft_size = 12d10
data_offset = 235800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 8d6
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 8d7, mft_size = 12d10
data_offset = 235c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 8d7
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 8d8, mft_size = 12d10
data_offset = 236000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 8d8
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 8d9, mft_size = 12d10
data_offset = 236400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 8d9
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 8da, mft_size = 12d10
data_offset = 236800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 8db, mft_size = 12d10
data_offset = 236c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou

12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000


12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 -

CMFTEntry: MFT entry number 8db


CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 8dc, mft_size = 12d10
data_offset = 237000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 8dc
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 8dd, mft_size = 12d10
data_offset = 237400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 8dd
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 8de, mft_size = 12d10
data_offset = 237800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 8df, mft_size = 12d10
data_offset = 237c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 8df
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 8e0, mft_size = 12d10
data_offset = 238000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 8e0
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 8e1, mft_size = 12d10
data_offset = 238400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 8e1
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 8e2, mft_size = 12d10
data_offset = 238800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 8e2

12:31:52 12:31:52 12:31:52 = 4b44000


12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 -

CEFSContainer::AddFile: invalid File name. rc = 111


Reading MFT entry. number = 8e3, mft_size = 12d10
data_offset = 238c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 8e4, mft_size = 12d10
data_offset = 239000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 8e5, mft_size = 12d10
data_offset = 239400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 8e6, mft_size = 12d10
data_offset = 239800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 8e6
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 8e7, mft_size = 12d10
data_offset = 239c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 8e7
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 8e8, mft_size = 12d10
data_offset = 23a000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 8e8
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 8e9, mft_size = 12d10
data_offset = 23a400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 8e9
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 8ea, mft_size = 12d10
data_offset = 23a800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 8ea

12:31:52 12:31:52 12:31:52 = 4b44000


12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 nd
12:31:52 12:31:52 12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000

CEFSContainer::AddFile: invalid File name. rc = 111


Reading MFT entry. number = 8eb, mft_size = 12d10
data_offset = 23ac00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 8eb
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 8ec, mft_size = 12d10
data_offset = 23b000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 8ec
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 8ed, mft_size = 12d10
data_offset = 23b400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 8ee, mft_size = 12d10
data_offset = 23b800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 8ee
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 8ef, mft_size = 12d10
data_offset = 23bc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 8f0, mft_size = 12d10
data_offset = 23c000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 8f0
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 8f1, mft_size = 12d10
data_offset = 23c400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 8f2, mft_size = 12d10
data_offset = 23c800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 8f3, mft_size = 12d10
data_offset = 23cc00, data_size = 400, file_size

12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:52 12:31:52 = 4b44000
12:31:52 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 -

cache = 1550020, cache_offset = 0, cache_size =


Reading MFT entry. number = 8f4, mft_size = 12d10
data_offset = 23d000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 8f5, mft_size = 12d10
data_offset = 23d400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 8f6, mft_size = 12d10
data_offset = 23d800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 8f7, mft_size = 12d10
data_offset = 23dc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 8f8, mft_size = 12d10
data_offset = 23e000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 8f8
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 8f9, mft_size = 12d10
data_offset = 23e400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 8fa, mft_size = 12d10
data_offset = 23e800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 8fa
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 8fb, mft_size = 12d10
data_offset = 23ec00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 8fb
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 8fc, mft_size = 12d10
data_offset = 23f000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 8fd, mft_size = 12d10

12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 -

data_offset = 23f400, data_size = 400, file_size


cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 8fd
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 8fe, mft_size = 12d10
data_offset = 23f800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 8fe
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 8ff, mft_size = 12d10
data_offset = 23fc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 8ff
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 900, mft_size = 12d10
data_offset = 240000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 900
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 901, mft_size = 12d10
data_offset = 240400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 902, mft_size = 12d10
data_offset = 240800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 903, mft_size = 12d10
data_offset = 240c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 903
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 904, mft_size = 12d10
data_offset = 241000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou

nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000

CMFTEntry: MFT entry number 904


CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 905, mft_size = 12d10
data_offset = 241400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 905
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 906, mft_size = 12d10
data_offset = 241800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 906
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 907, mft_size = 12d10
data_offset = 241c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 907
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 908, mft_size = 12d10
data_offset = 242000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 908
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 909, mft_size = 12d10
data_offset = 242400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 909
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 90a, mft_size = 12d10
data_offset = 242800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 90a
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 90b, mft_size = 12d10
data_offset = 242c00, data_size = 400, file_size

12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 -

cache = 1550020, cache_offset = 0, cache_size =


CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 90b
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 90c, mft_size = 12d10
data_offset = 243000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 90d, mft_size = 12d10
data_offset = 243400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 90d
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 90e, mft_size = 12d10
data_offset = 243800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 90e
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 90f, mft_size = 12d10
data_offset = 243c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 90f
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 910, mft_size = 12d10
data_offset = 244000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 910
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 911, mft_size = 12d10
data_offset = 244400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 911
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 912, mft_size = 12d10
data_offset = 244800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =

400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000

CMFTEntry::GetFileName: $FILE_NAME attribute was not fou


CMFTEntry: MFT entry number 912
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 913, mft_size = 12d10
data_offset = 244c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 913
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 914, mft_size = 12d10
data_offset = 245000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 914
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 915, mft_size = 12d10
data_offset = 245400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 915
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 916, mft_size = 12d10
data_offset = 245800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 916
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 917, mft_size = 12d10
data_offset = 245c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 917
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 918, mft_size = 12d10
data_offset = 246000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 919, mft_size = 12d10
data_offset = 246400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =

12:31:53 12:31:53 = 4b44000


12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 -

Reading MFT entry. number = 91a, mft_size = 12d10


data_offset = 246800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 91a
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 91b, mft_size = 12d10
data_offset = 246c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 91b
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 91c, mft_size = 12d10
data_offset = 247000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 91c
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 91d, mft_size = 12d10
data_offset = 247400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 91d
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 91e, mft_size = 12d10
data_offset = 247800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 91e
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 91f, mft_size = 12d10
data_offset = 247c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 91f
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 920, mft_size = 12d10
data_offset = 248000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou

nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 -

CMFTEntry: MFT entry number 920


CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 921, mft_size = 12d10
data_offset = 248400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 922, mft_size = 12d10
data_offset = 248800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 923, mft_size = 12d10
data_offset = 248c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 923
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 924, mft_size = 12d10
data_offset = 249000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 924
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 925, mft_size = 12d10
data_offset = 249400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 925
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 926, mft_size = 12d10
data_offset = 249800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 926
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 927, mft_size = 12d10
data_offset = 249c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 927
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 928, mft_size = 12d10
data_offset = 24a000, data_size = 400, file_size

= 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 -

cache = 1550020, cache_offset = 0, cache_size =


CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 928
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 929, mft_size = 12d10
data_offset = 24a400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 929
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 92a, mft_size = 12d10
data_offset = 24a800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 92b, mft_size = 12d10
data_offset = 24ac00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 92b
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 92c, mft_size = 12d10
data_offset = 24b000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 92d, mft_size = 12d10
data_offset = 24b400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 92e, mft_size = 12d10
data_offset = 24b800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 92e
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 92f, mft_size = 12d10
data_offset = 24bc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 930, mft_size = 12d10
data_offset = 24c000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou

nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000

CMFTEntry: MFT entry number 930


CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 931, mft_size = 12d10
data_offset = 24c400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 931
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 932, mft_size = 12d10
data_offset = 24c800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 932
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 933, mft_size = 12d10
data_offset = 24cc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 933
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 934, mft_size = 12d10
data_offset = 24d000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 934
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 935, mft_size = 12d10
data_offset = 24d400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 935
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 936, mft_size = 12d10
data_offset = 24d800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 936
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 937, mft_size = 12d10
data_offset = 24dc00, data_size = 400, file_size

12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000

cache = 1550020, cache_offset = 0, cache_size =


CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 937
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 938, mft_size = 12d10
data_offset = 24e000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 939, mft_size = 12d10
data_offset = 24e400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 939
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 93a, mft_size = 12d10
data_offset = 24e800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 93b, mft_size = 12d10
data_offset = 24ec00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 93b
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 93c, mft_size = 12d10
data_offset = 24f000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 93d, mft_size = 12d10
data_offset = 24f400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 93d
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 93e, mft_size = 12d10
data_offset = 24f800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 93e
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 93f, mft_size = 12d10
data_offset = 24fc00, data_size = 400, file_size

12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 -

cache = 1550020, cache_offset = 0, cache_size =


CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 93f
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 940, mft_size = 12d10
data_offset = 250000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 940
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 941, mft_size = 12d10
data_offset = 250400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 942, mft_size = 12d10
data_offset = 250800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 942
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 943, mft_size = 12d10
data_offset = 250c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 943
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 944, mft_size = 12d10
data_offset = 251000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 944
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 945, mft_size = 12d10
data_offset = 251400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 945
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 946, mft_size = 12d10
data_offset = 251800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =

400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000

CMFTEntry::GetFileName: $FILE_NAME attribute was not fou


CMFTEntry: MFT entry number 946
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 947, mft_size = 12d10
data_offset = 251c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 947
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 948, mft_size = 12d10
data_offset = 252000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 948
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 949, mft_size = 12d10
data_offset = 252400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 94a, mft_size = 12d10
data_offset = 252800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 94a
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 94b, mft_size = 12d10
data_offset = 252c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 94b
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 94c, mft_size = 12d10
data_offset = 253000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 94c
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 94d, mft_size = 12d10
data_offset = 253400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =

12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 -

CMFTEntry::GetFileName: $FILE_NAME attribute was not fou


CMFTEntry: MFT entry number 94d
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 94e, mft_size = 12d10
data_offset = 253800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 94f, mft_size = 12d10
data_offset = 253c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 94f
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 950, mft_size = 12d10
data_offset = 254000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 950
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 951, mft_size = 12d10
data_offset = 254400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 951
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 952, mft_size = 12d10
data_offset = 254800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 952
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 953, mft_size = 12d10
data_offset = 254c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 953
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 954, mft_size = 12d10
data_offset = 255000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou

nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 -

CMFTEntry: MFT entry number 954


CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 955, mft_size = 12d10
data_offset = 255400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 956, mft_size = 12d10
data_offset = 255800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 957, mft_size = 12d10
data_offset = 255c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 958, mft_size = 12d10
data_offset = 256000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 958
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 959, mft_size = 12d10
data_offset = 256400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 959
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 95a, mft_size = 12d10
data_offset = 256800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 95b, mft_size = 12d10
data_offset = 256c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 95b
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 95c, mft_size = 12d10
data_offset = 257000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 95c
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 95d, mft_size = 12d10

12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 -

data_offset = 257400, data_size = 400, file_size


cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 95e, mft_size = 12d10
data_offset = 257800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 95e
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 95f, mft_size = 12d10
data_offset = 257c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 95f
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 960, mft_size = 12d10
data_offset = 258000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 960
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 961, mft_size = 12d10
data_offset = 258400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 961
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 962, mft_size = 12d10
data_offset = 258800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 962
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 963, mft_size = 12d10
data_offset = 258c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 963
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 964, mft_size = 12d10
data_offset = 259000, data_size = 400, file_size

= 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd

cache = 1550020, cache_offset = 0, cache_size =


Reading MFT entry. number = 965, mft_size = 12d10
data_offset = 259400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 965
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 966, mft_size = 12d10
data_offset = 259800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 966
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 967, mft_size = 12d10
data_offset = 259c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 967
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 968, mft_size = 12d10
data_offset = 25a000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 968
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 969, mft_size = 12d10
data_offset = 25a400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 96a, mft_size = 12d10
data_offset = 25a800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 96a
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 96b, mft_size = 12d10
data_offset = 25ac00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou

12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000


12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000

CMFTEntry: MFT entry number 96b


CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 96c, mft_size = 12d10
data_offset = 25b000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 96c
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 96d, mft_size = 12d10
data_offset = 25b400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 96d
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 96e, mft_size = 12d10
data_offset = 25b800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 96e
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 96f, mft_size = 12d10
data_offset = 25bc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 96f
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 970, mft_size = 12d10
data_offset = 25c000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 970
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 971, mft_size = 12d10
data_offset = 25c400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 972, mft_size = 12d10
data_offset = 25c800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 973, mft_size = 12d10
data_offset = 25cc00, data_size = 400, file_size

12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 -

cache = 1550020, cache_offset = 0, cache_size =


CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 973
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 974, mft_size = 12d10
data_offset = 25d000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 974
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 975, mft_size = 12d10
data_offset = 25d400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 975
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 976, mft_size = 12d10
data_offset = 25d800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 976
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 977, mft_size = 12d10
data_offset = 25dc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 977
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 978, mft_size = 12d10
data_offset = 25e000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 978
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 979, mft_size = 12d10
data_offset = 25e400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 979
CEFSContainer::AddFile: invalid File name. rc = 111

12:31:53 12:31:53 = 4b44000


12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 -

Reading MFT entry. number = 97a, mft_size = 12d10


data_offset = 25e800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 97b, mft_size = 12d10
data_offset = 25ec00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 97b
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 97c, mft_size = 12d10
data_offset = 25f000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 97c
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 97d, mft_size = 12d10
data_offset = 25f400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 97d
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 97e, mft_size = 12d10
data_offset = 25f800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 97e
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 97f, mft_size = 12d10
data_offset = 25fc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 97f
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 980, mft_size = 12d10
data_offset = 260000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 980
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 981, mft_size = 12d10

12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd

data_offset = 260400, data_size = 400, file_size


cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 981
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 982, mft_size = 12d10
data_offset = 260800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 982
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 983, mft_size = 12d10
data_offset = 260c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 983
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 984, mft_size = 12d10
data_offset = 261000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 984
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 985, mft_size = 12d10
data_offset = 261400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 985
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 986, mft_size = 12d10
data_offset = 261800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 986
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 987, mft_size = 12d10
data_offset = 261c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou

12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000


12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 -

CMFTEntry: MFT entry number 987


CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 988, mft_size = 12d10
data_offset = 262000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 988
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 989, mft_size = 12d10
data_offset = 262400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 989
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 98a, mft_size = 12d10
data_offset = 262800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 98a
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 98b, mft_size = 12d10
data_offset = 262c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 98c, mft_size = 12d10
data_offset = 263000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 98c
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 98d, mft_size = 12d10
data_offset = 263400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 98d
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 98e, mft_size = 12d10
data_offset = 263800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 98e

12:31:53 12:31:53 12:31:53 = 4b44000


12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 -

CEFSContainer::AddFile: invalid File name. rc = 111


Reading MFT entry. number = 98f, mft_size = 12d10
data_offset = 263c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 98f
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 990, mft_size = 12d10
data_offset = 264000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 991, mft_size = 12d10
data_offset = 264400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 991
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 992, mft_size = 12d10
data_offset = 264800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 992
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 993, mft_size = 12d10
data_offset = 264c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 994, mft_size = 12d10
data_offset = 265000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 994
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 995, mft_size = 12d10
data_offset = 265400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 995
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 996, mft_size = 12d10
data_offset = 265800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =

400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000

CMFTEntry::GetFileName: $FILE_NAME attribute was not fou


CMFTEntry: MFT entry number 996
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 997, mft_size = 12d10
data_offset = 265c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 997
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 998, mft_size = 12d10
data_offset = 266000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 998
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 999, mft_size = 12d10
data_offset = 266400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 999
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 99a, mft_size = 12d10
data_offset = 266800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 99a
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 99b, mft_size = 12d10
data_offset = 266c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 99b
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 99c, mft_size = 12d10
data_offset = 267000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 99d, mft_size = 12d10
data_offset = 267400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =

12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 -

CMFTEntry::GetFileName: $FILE_NAME attribute was not fou


CMFTEntry: MFT entry number 99d
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 99e, mft_size = 12d10
data_offset = 267800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 99e
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 99f, mft_size = 12d10
data_offset = 267c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 99f
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 9a0, mft_size = 12d10
data_offset = 268000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 9a1, mft_size = 12d10
data_offset = 268400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 9a2, mft_size = 12d10
data_offset = 268800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 9a2
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 9a3, mft_size = 12d10
data_offset = 268c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 9a3
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 9a4, mft_size = 12d10
data_offset = 269000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 9a4
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 9a5, mft_size = 12d10

12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 -

data_offset = 269400, data_size = 400, file_size


cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 9a5
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 9a6, mft_size = 12d10
data_offset = 269800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 9a7, mft_size = 12d10
data_offset = 269c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 9a7
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 9a8, mft_size = 12d10
data_offset = 26a000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 9a8
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 9a9, mft_size = 12d10
data_offset = 26a400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 9a9
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 9aa, mft_size = 12d10
data_offset = 26a800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 9aa
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 9ab, mft_size = 12d10
data_offset = 26ac00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 9ab
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 9ac, mft_size = 12d10
data_offset = 26b000, data_size = 400, file_size

= 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd

cache = 1550020, cache_offset = 0, cache_size =


CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 9ac
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 9ad, mft_size = 12d10
data_offset = 26b400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 9ad
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 9ae, mft_size = 12d10
data_offset = 26b800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 9af, mft_size = 12d10
data_offset = 26bc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 9af
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 9b0, mft_size = 12d10
data_offset = 26c000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 9b0
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 9b1, mft_size = 12d10
data_offset = 26c400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 9b2, mft_size = 12d10
data_offset = 26c800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 9b2
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 9b3, mft_size = 12d10
data_offset = 26cc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou

12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000


12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 -

CMFTEntry: MFT entry number 9b3


CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 9b4, mft_size = 12d10
data_offset = 26d000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 9b4
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 9b5, mft_size = 12d10
data_offset = 26d400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 9b5
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 9b6, mft_size = 12d10
data_offset = 26d800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 9b6
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 9b7, mft_size = 12d10
data_offset = 26dc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 9b7
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 9b8, mft_size = 12d10
data_offset = 26e000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 9b8
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 9b9, mft_size = 12d10
data_offset = 26e400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 9b9
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 9ba, mft_size = 12d10
data_offset = 26e800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =

400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 -

CMFTEntry::GetFileName: $FILE_NAME attribute was not fou


CMFTEntry: MFT entry number 9ba
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 9bb, mft_size = 12d10
data_offset = 26ec00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 9bc, mft_size = 12d10
data_offset = 26f000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 9bd, mft_size = 12d10
data_offset = 26f400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 9bd
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 9be, mft_size = 12d10
data_offset = 26f800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 9be
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 9bf, mft_size = 12d10
data_offset = 26fc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 9bf
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 9c0, mft_size = 12d10
data_offset = 270000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 9c0
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 9c1, mft_size = 12d10
data_offset = 270400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 9c2, mft_size = 12d10
data_offset = 270800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =

400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 -

CMFTEntry::GetFileName: $FILE_NAME attribute was not fou


CMFTEntry: MFT entry number 9c2
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 9c3, mft_size = 12d10
data_offset = 270c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 9c3
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 9c4, mft_size = 12d10
data_offset = 271000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 9c4
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 9c5, mft_size = 12d10
data_offset = 271400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 9c6, mft_size = 12d10
data_offset = 271800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 9c7, mft_size = 12d10
data_offset = 271c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 9c7
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 9c8, mft_size = 12d10
data_offset = 272000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 9c8
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 9c9, mft_size = 12d10
data_offset = 272400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 9c9
CEFSContainer::AddFile: invalid File name. rc = 111

12:31:53 12:31:53 = 4b44000


12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 -

Reading MFT entry. number = 9ca, mft_size = 12d10


data_offset = 272800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 9ca
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 9cb, mft_size = 12d10
data_offset = 272c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 9cb
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 9cc, mft_size = 12d10
data_offset = 273000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 9cc
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 9cd, mft_size = 12d10
data_offset = 273400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 9cd
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 9ce, mft_size = 12d10
data_offset = 273800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 9cf, mft_size = 12d10
data_offset = 273c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 9cf
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 9d0, mft_size = 12d10
data_offset = 274000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 9d0
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 9d1, mft_size = 12d10

12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 -

data_offset = 274400, data_size = 400, file_size


cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 9d1
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 9d2, mft_size = 12d10
data_offset = 274800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 9d2
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 9d3, mft_size = 12d10
data_offset = 274c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 9d3
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 9d4, mft_size = 12d10
data_offset = 275000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 9d5, mft_size = 12d10
data_offset = 275400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 9d5
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 9d6, mft_size = 12d10
data_offset = 275800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 9d6
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 9d7, mft_size = 12d10
data_offset = 275c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 9d8, mft_size = 12d10
data_offset = 276000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou

nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 -

CMFTEntry: MFT entry number 9d8


CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 9d9, mft_size = 12d10
data_offset = 276400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 9d9
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 9da, mft_size = 12d10
data_offset = 276800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 9db, mft_size = 12d10
data_offset = 276c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 9db
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 9dc, mft_size = 12d10
data_offset = 277000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 9dc
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 9dd, mft_size = 12d10
data_offset = 277400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 9de, mft_size = 12d10
data_offset = 277800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 9df, mft_size = 12d10
data_offset = 277c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 9e0, mft_size = 12d10
data_offset = 278000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 9e0
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 9e1, mft_size = 12d10

12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd

data_offset = 278400, data_size = 400, file_size


cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 9e1
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 9e2, mft_size = 12d10
data_offset = 278800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 9e2
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 9e3, mft_size = 12d10
data_offset = 278c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 9e3
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 9e4, mft_size = 12d10
data_offset = 279000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 9e4
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 9e5, mft_size = 12d10
data_offset = 279400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 9e5
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 9e6, mft_size = 12d10
data_offset = 279800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 9e6
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 9e7, mft_size = 12d10
data_offset = 279c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou

12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000


12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 -

CMFTEntry: MFT entry number 9e7


CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 9e8, mft_size = 12d10
data_offset = 27a000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 9e8
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 9e9, mft_size = 12d10
data_offset = 27a400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 9e9
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 9ea, mft_size = 12d10
data_offset = 27a800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 9eb, mft_size = 12d10
data_offset = 27ac00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 9eb
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 9ec, mft_size = 12d10
data_offset = 27b000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 9ed, mft_size = 12d10
data_offset = 27b400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 9ee, mft_size = 12d10
data_offset = 27b800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 9ef, mft_size = 12d10
data_offset = 27bc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 9ef
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 9f0, mft_size = 12d10
data_offset = 27c000, data_size = 400, file_size

= 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 -

cache = 1550020, cache_offset = 0, cache_size =


CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 9f0
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 9f1, mft_size = 12d10
data_offset = 27c400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 9f1
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 9f2, mft_size = 12d10
data_offset = 27c800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 9f2
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 9f3, mft_size = 12d10
data_offset = 27cc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 9f3
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 9f4, mft_size = 12d10
data_offset = 27d000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 9f4
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 9f5, mft_size = 12d10
data_offset = 27d400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 9f5
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 9f6, mft_size = 12d10
data_offset = 27d800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 9f6

12:31:53 12:31:53 12:31:53 = 4b44000


12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000

CEFSContainer::AddFile: invalid File name. rc = 111


Reading MFT entry. number = 9f7, mft_size = 12d10
data_offset = 27dc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 9f7
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 9f8, mft_size = 12d10
data_offset = 27e000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 9f8
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 9f9, mft_size = 12d10
data_offset = 27e400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 9f9
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 9fa, mft_size = 12d10
data_offset = 27e800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 9fa
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 9fb, mft_size = 12d10
data_offset = 27ec00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 9fb
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 9fc, mft_size = 12d10
data_offset = 27f000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 9fc
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 9fd, mft_size = 12d10
data_offset = 27f400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =

12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 -

CMFTEntry::GetFileName: $FILE_NAME attribute was not fou


CMFTEntry: MFT entry number 9fd
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 9fe, mft_size = 12d10
data_offset = 27f800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = 9ff, mft_size = 12d10
data_offset = 27fc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 9ff
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = a00, mft_size = 12d10
data_offset = 280000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number a00
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = a01, mft_size = 12d10
data_offset = 280400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number a01
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = a02, mft_size = 12d10
data_offset = 280800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number a02
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = a03, mft_size = 12d10
data_offset = 280c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number a03
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = a04, mft_size = 12d10
data_offset = 281000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = a05, mft_size = 12d10

12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 -

data_offset = 281400, data_size = 400, file_size


cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = a06, mft_size = 12d10
data_offset = 281800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number a06
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = a07, mft_size = 12d10
data_offset = 281c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number a07
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = a08, mft_size = 12d10
data_offset = 282000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number a08
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = a09, mft_size = 12d10
data_offset = 282400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number a09
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = a0a, mft_size = 12d10
data_offset = 282800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number a0a
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = a0b, mft_size = 12d10
data_offset = 282c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number a0b
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = a0c, mft_size = 12d10
data_offset = 283000, data_size = 400, file_size

= 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000

cache = 1550020, cache_offset = 0, cache_size =


Reading MFT entry. number = a0d, mft_size = 12d10
data_offset = 283400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = a0e, mft_size = 12d10
data_offset = 283800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = a0f, mft_size = 12d10
data_offset = 283c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = a10, mft_size = 12d10
data_offset = 284000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number a10
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = a11, mft_size = 12d10
data_offset = 284400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number a11
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = a12, mft_size = 12d10
data_offset = 284800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = a13, mft_size = 12d10
data_offset = 284c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = a14, mft_size = 12d10
data_offset = 285000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number a14
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = a15, mft_size = 12d10
data_offset = 285400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =

12:31:53 12:31:53 = 4b44000


12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 -

Reading MFT entry. number = a16, mft_size = 12d10


data_offset = 285800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number a16
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = a17, mft_size = 12d10
data_offset = 285c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number a17
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = a18, mft_size = 12d10
data_offset = 286000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number a18
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = a19, mft_size = 12d10
data_offset = 286400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number a19
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = a1a, mft_size = 12d10
data_offset = 286800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number a1a
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = a1b, mft_size = 12d10
data_offset = 286c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number a1b
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = a1c, mft_size = 12d10
data_offset = 287000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou

nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 -

CMFTEntry: MFT entry number a1c


CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = a1d, mft_size = 12d10
data_offset = 287400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = a1e, mft_size = 12d10
data_offset = 287800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = a1f, mft_size = 12d10
data_offset = 287c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = a20, mft_size = 12d10
data_offset = 288000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = a21, mft_size = 12d10
data_offset = 288400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = a22, mft_size = 12d10
data_offset = 288800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = a23, mft_size = 12d10
data_offset = 288c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = a24, mft_size = 12d10
data_offset = 289000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = a25, mft_size = 12d10
data_offset = 289400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = a26, mft_size = 12d10
data_offset = 289800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = a27, mft_size = 12d10
data_offset = 289c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = a28, mft_size = 12d10
data_offset = 28a000, data_size = 400, file_size

= 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd

cache = 1550020, cache_offset = 0, cache_size =


CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number a28
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = a29, mft_size = 12d10
data_offset = 28a400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number a29
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = a2a, mft_size = 12d10
data_offset = 28a800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = a2b, mft_size = 12d10
data_offset = 28ac00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number a2b
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = a2c, mft_size = 12d10
data_offset = 28b000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = a2d, mft_size = 12d10
data_offset = 28b400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number a2d
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = a2e, mft_size = 12d10
data_offset = 28b800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number a2e
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = a2f, mft_size = 12d10
data_offset = 28bc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou

12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000


12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd

CMFTEntry: MFT entry number a2f


CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = a30, mft_size = 12d10
data_offset = 28c000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number a30
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = a31, mft_size = 12d10
data_offset = 28c400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = a32, mft_size = 12d10
data_offset = 28c800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = a33, mft_size = 12d10
data_offset = 28cc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = a34, mft_size = 12d10
data_offset = 28d000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number a34
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = a35, mft_size = 12d10
data_offset = 28d400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number a35
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = a36, mft_size = 12d10
data_offset = 28d800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number a36
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = a37, mft_size = 12d10
data_offset = 28dc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou

12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000


12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd

CMFTEntry: MFT entry number a37


CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = a38, mft_size = 12d10
data_offset = 28e000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = a39, mft_size = 12d10
data_offset = 28e400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number a39
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = a3a, mft_size = 12d10
data_offset = 28e800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number a3a
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = a3b, mft_size = 12d10
data_offset = 28ec00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number a3b
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = a3c, mft_size = 12d10
data_offset = 28f000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = a3d, mft_size = 12d10
data_offset = 28f400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = a3e, mft_size = 12d10
data_offset = 28f800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number a3e
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = a3f, mft_size = 12d10
data_offset = 28fc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou

12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000


12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd

CMFTEntry: MFT entry number a3f


CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = a40, mft_size = 12d10
data_offset = 290000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = a41, mft_size = 12d10
data_offset = 290400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = a42, mft_size = 12d10
data_offset = 290800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number a42
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = a43, mft_size = 12d10
data_offset = 290c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = a44, mft_size = 12d10
data_offset = 291000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number a44
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = a45, mft_size = 12d10
data_offset = 291400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number a45
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = a46, mft_size = 12d10
data_offset = 291800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number a46
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = a47, mft_size = 12d10
data_offset = 291c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou

12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000


12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000

CMFTEntry: MFT entry number a47


CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = a48, mft_size = 12d10
data_offset = 292000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = a49, mft_size = 12d10
data_offset = 292400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number a49
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = a4a, mft_size = 12d10
data_offset = 292800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = a4b, mft_size = 12d10
data_offset = 292c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number a4b
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = a4c, mft_size = 12d10
data_offset = 293000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number a4c
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = a4d, mft_size = 12d10
data_offset = 293400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number a4d
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = a4e, mft_size = 12d10
data_offset = 293800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number a4e
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = a4f, mft_size = 12d10
data_offset = 293c00, data_size = 400, file_size

12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 -

cache = 1550020, cache_offset = 0, cache_size =


Reading MFT entry. number = a50, mft_size = 12d10
data_offset = 294000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = a51, mft_size = 12d10
data_offset = 294400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number a51
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = a52, mft_size = 12d10
data_offset = 294800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number a52
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = a53, mft_size = 12d10
data_offset = 294c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number a53
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = a54, mft_size = 12d10
data_offset = 295000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = a55, mft_size = 12d10
data_offset = 295400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = a56, mft_size = 12d10
data_offset = 295800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = a57, mft_size = 12d10
data_offset = 295c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = a58, mft_size = 12d10
data_offset = 296000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou

nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd

CMFTEntry: MFT entry number a58


CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = a59, mft_size = 12d10
data_offset = 296400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = a5a, mft_size = 12d10
data_offset = 296800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number a5a
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = a5b, mft_size = 12d10
data_offset = 296c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number a5b
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = a5c, mft_size = 12d10
data_offset = 297000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number a5c
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = a5d, mft_size = 12d10
data_offset = 297400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number a5d
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = a5e, mft_size = 12d10
data_offset = 297800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number a5e
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = a5f, mft_size = 12d10
data_offset = 297c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou

12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000


12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000

CMFTEntry: MFT entry number a5f


CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = a60, mft_size = 12d10
data_offset = 298000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number a60
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = a61, mft_size = 12d10
data_offset = 298400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number a61
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = a62, mft_size = 12d10
data_offset = 298800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number a62
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = a63, mft_size = 12d10
data_offset = 298c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number a63
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = a64, mft_size = 12d10
data_offset = 299000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number a64
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = a65, mft_size = 12d10
data_offset = 299400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = a66, mft_size = 12d10
data_offset = 299800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = a67, mft_size = 12d10
data_offset = 299c00, data_size = 400, file_size

12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd

cache = 1550020, cache_offset = 0, cache_size =


Reading MFT entry. number = a68, mft_size = 12d10
data_offset = 29a000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number a68
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = a69, mft_size = 12d10
data_offset = 29a400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = a6a, mft_size = 12d10
data_offset = 29a800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = a6b, mft_size = 12d10
data_offset = 29ac00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = a6c, mft_size = 12d10
data_offset = 29b000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number a6c
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = a6d, mft_size = 12d10
data_offset = 29b400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number a6d
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = a6e, mft_size = 12d10
data_offset = 29b800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number a6e
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = a6f, mft_size = 12d10
data_offset = 29bc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou

12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000


12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 -

CMFTEntry: MFT entry number a6f


CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = a70, mft_size = 12d10
data_offset = 29c000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number a70
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = a71, mft_size = 12d10
data_offset = 29c400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number a71
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = a72, mft_size = 12d10
data_offset = 29c800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number a72
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = a73, mft_size = 12d10
data_offset = 29cc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number a73
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = a74, mft_size = 12d10
data_offset = 29d000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = a75, mft_size = 12d10
data_offset = 29d400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number a75
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = a76, mft_size = 12d10
data_offset = 29d800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number a76

12:31:53 12:31:53 12:31:53 = 4b44000


12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 -

CEFSContainer::AddFile: invalid File name. rc = 111


Reading MFT entry. number = a77, mft_size = 12d10
data_offset = 29dc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number a77
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = a78, mft_size = 12d10
data_offset = 29e000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = a79, mft_size = 12d10
data_offset = 29e400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number a79
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = a7a, mft_size = 12d10
data_offset = 29e800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number a7a
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = a7b, mft_size = 12d10
data_offset = 29ec00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number a7b
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = a7c, mft_size = 12d10
data_offset = 29f000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = a7d, mft_size = 12d10
data_offset = 29f400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number a7d
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = a7e, mft_size = 12d10
data_offset = 29f800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =

400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 -

Reading MFT entry. number = a7f, mft_size = 12d10


data_offset = 29fc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number a7f
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = a80, mft_size = 12d10
data_offset = 2a0000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = a81, mft_size = 12d10
data_offset = 2a0400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = a82, mft_size = 12d10
data_offset = 2a0800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number a82
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = a83, mft_size = 12d10
data_offset = 2a0c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number a83
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = a84, mft_size = 12d10
data_offset = 2a1000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number a84
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = a85, mft_size = 12d10
data_offset = 2a1400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number a85
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = a86, mft_size = 12d10
data_offset = 2a1800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =

400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 -

CMFTEntry::GetFileName: $FILE_NAME attribute was not fou


CMFTEntry: MFT entry number a86
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = a87, mft_size = 12d10
data_offset = 2a1c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number a87
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = a88, mft_size = 12d10
data_offset = 2a2000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number a88
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = a89, mft_size = 12d10
data_offset = 2a2400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number a89
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = a8a, mft_size = 12d10
data_offset = 2a2800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number a8a
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = a8b, mft_size = 12d10
data_offset = 2a2c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number a8b
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = a8c, mft_size = 12d10
data_offset = 2a3000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number a8c
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = a8d, mft_size = 12d10

12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd

data_offset = 2a3400, data_size = 400, file_size


cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number a8d
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = a8e, mft_size = 12d10
data_offset = 2a3800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number a8e
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = a8f, mft_size = 12d10
data_offset = 2a3c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number a8f
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = a90, mft_size = 12d10
data_offset = 2a4000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number a90
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = a91, mft_size = 12d10
data_offset = 2a4400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number a91
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = a92, mft_size = 12d10
data_offset = 2a4800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number a92
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = a93, mft_size = 12d10
data_offset = 2a4c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou

12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000


12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 -

CMFTEntry: MFT entry number a93


CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = a94, mft_size = 12d10
data_offset = 2a5000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number a94
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = a95, mft_size = 12d10
data_offset = 2a5400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number a95
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = a96, mft_size = 12d10
data_offset = 2a5800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = a97, mft_size = 12d10
data_offset = 2a5c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number a97
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = a98, mft_size = 12d10
data_offset = 2a6000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number a98
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = a99, mft_size = 12d10
data_offset = 2a6400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number a99
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = a9a, mft_size = 12d10
data_offset = 2a6800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number a9a

12:31:53 12:31:53 12:31:53 = 4b44000


12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000

CEFSContainer::AddFile: invalid File name. rc = 111


Reading MFT entry. number = a9b, mft_size = 12d10
data_offset = 2a6c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number a9b
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = a9c, mft_size = 12d10
data_offset = 2a7000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number a9c
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = a9d, mft_size = 12d10
data_offset = 2a7400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number a9d
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = a9e, mft_size = 12d10
data_offset = 2a7800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = a9f, mft_size = 12d10
data_offset = 2a7c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number a9f
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = aa0, mft_size = 12d10
data_offset = 2a8000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = aa1, mft_size = 12d10
data_offset = 2a8400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = aa2, mft_size = 12d10
data_offset = 2a8800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = aa3, mft_size = 12d10
data_offset = 2a8c00, data_size = 400, file_size

12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 -

cache = 1550020, cache_offset = 0, cache_size =


CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number aa3
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = aa4, mft_size = 12d10
data_offset = 2a9000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number aa4
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = aa5, mft_size = 12d10
data_offset = 2a9400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number aa5
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = aa6, mft_size = 12d10
data_offset = 2a9800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number aa6
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = aa7, mft_size = 12d10
data_offset = 2a9c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = aa8, mft_size = 12d10
data_offset = 2aa000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number aa8
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = aa9, mft_size = 12d10
data_offset = 2aa400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number aa9
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = aaa, mft_size = 12d10
data_offset = 2aa800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =

400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000

CMFTEntry::GetFileName: $FILE_NAME attribute was not fou


CMFTEntry: MFT entry number aaa
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = aab, mft_size = 12d10
data_offset = 2aac00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number aab
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = aac, mft_size = 12d10
data_offset = 2ab000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number aac
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = aad, mft_size = 12d10
data_offset = 2ab400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number aad
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = aae, mft_size = 12d10
data_offset = 2ab800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number aae
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = aaf, mft_size = 12d10
data_offset = 2abc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = ab0, mft_size = 12d10
data_offset = 2ac000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number ab0
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = ab1, mft_size = 12d10
data_offset = 2ac400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =

12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 -

CMFTEntry::GetFileName: $FILE_NAME attribute was not fou


CMFTEntry: MFT entry number ab1
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = ab2, mft_size = 12d10
data_offset = 2ac800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number ab2
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = ab3, mft_size = 12d10
data_offset = 2acc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number ab3
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = ab4, mft_size = 12d10
data_offset = 2ad000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number ab4
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = ab5, mft_size = 12d10
data_offset = 2ad400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = ab6, mft_size = 12d10
data_offset = 2ad800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number ab6
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = ab7, mft_size = 12d10
data_offset = 2adc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number ab7
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = ab8, mft_size = 12d10
data_offset = 2ae000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou

nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 -

CMFTEntry: MFT entry number ab8


CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = ab9, mft_size = 12d10
data_offset = 2ae400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number ab9
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = aba, mft_size = 12d10
data_offset = 2ae800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number aba
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = abb, mft_size = 12d10
data_offset = 2aec00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number abb
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = abc, mft_size = 12d10
data_offset = 2af000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number abc
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = abd, mft_size = 12d10
data_offset = 2af400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = abe, mft_size = 12d10
data_offset = 2af800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number abe
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = abf, mft_size = 12d10
data_offset = 2afc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = ac0, mft_size = 12d10
data_offset = 2b0000, data_size = 400, file_size

= 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000

cache = 1550020, cache_offset = 0, cache_size =


CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number ac0
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = ac1, mft_size = 12d10
data_offset = 2b0400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number ac1
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = ac2, mft_size = 12d10
data_offset = 2b0800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number ac2
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = ac3, mft_size = 12d10
data_offset = 2b0c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number ac3
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = ac4, mft_size = 12d10
data_offset = 2b1000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number ac4
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = ac5, mft_size = 12d10
data_offset = 2b1400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = ac6, mft_size = 12d10
data_offset = 2b1800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number ac6
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = ac7, mft_size = 12d10
data_offset = 2b1c00, data_size = 400, file_size

12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 -

cache = 1550020, cache_offset = 0, cache_size =


CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number ac7
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = ac8, mft_size = 12d10
data_offset = 2b2000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number ac8
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = ac9, mft_size = 12d10
data_offset = 2b2400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number ac9
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = aca, mft_size = 12d10
data_offset = 2b2800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number aca
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = acb, mft_size = 12d10
data_offset = 2b2c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number acb
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = acc, mft_size = 12d10
data_offset = 2b3000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = acd, mft_size = 12d10
data_offset = 2b3400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number acd
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = ace, mft_size = 12d10
data_offset = 2b3800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =

400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 -

CMFTEntry::GetFileName: $FILE_NAME attribute was not fou


CMFTEntry: MFT entry number ace
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = acf, mft_size = 12d10
data_offset = 2b3c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number acf
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = ad0, mft_size = 12d10
data_offset = 2b4000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number ad0
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = ad1, mft_size = 12d10
data_offset = 2b4400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number ad1
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = ad2, mft_size = 12d10
data_offset = 2b4800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number ad2
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = ad3, mft_size = 12d10
data_offset = 2b4c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number ad3
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = ad4, mft_size = 12d10
data_offset = 2b5000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number ad4
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = ad5, mft_size = 12d10

12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 -

data_offset = 2b5400, data_size = 400, file_size


cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = ad6, mft_size = 12d10
data_offset = 2b5800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number ad6
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = ad7, mft_size = 12d10
data_offset = 2b5c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number ad7
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = ad8, mft_size = 12d10
data_offset = 2b6000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = ad9, mft_size = 12d10
data_offset = 2b6400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number ad9
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = ada, mft_size = 12d10
data_offset = 2b6800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = adb, mft_size = 12d10
data_offset = 2b6c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number adb
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = adc, mft_size = 12d10
data_offset = 2b7000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number adc
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = add, mft_size = 12d10

12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 -

data_offset = 2b7400, data_size = 400, file_size


cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number add
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = ade, mft_size = 12d10
data_offset = 2b7800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = adf, mft_size = 12d10
data_offset = 2b7c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number adf
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = ae0, mft_size = 12d10
data_offset = 2b8000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number ae0
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = ae1, mft_size = 12d10
data_offset = 2b8400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number ae1
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = ae2, mft_size = 12d10
data_offset = 2b8800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number ae2
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = ae3, mft_size = 12d10
data_offset = 2b8c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = ae4, mft_size = 12d10
data_offset = 2b9000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou

nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd

CMFTEntry: MFT entry number ae4


CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = ae5, mft_size = 12d10
data_offset = 2b9400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number ae5
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = ae6, mft_size = 12d10
data_offset = 2b9800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number ae6
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = ae7, mft_size = 12d10
data_offset = 2b9c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number ae7
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = ae8, mft_size = 12d10
data_offset = 2ba000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = ae9, mft_size = 12d10
data_offset = 2ba400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number ae9
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = aea, mft_size = 12d10
data_offset = 2ba800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number aea
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = aeb, mft_size = 12d10
data_offset = 2bac00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou

12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000


12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 -

CMFTEntry: MFT entry number aeb


CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = aec, mft_size = 12d10
data_offset = 2bb000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number aec
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = aed, mft_size = 12d10
data_offset = 2bb400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number aed
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = aee, mft_size = 12d10
data_offset = 2bb800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number aee
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = aef, mft_size = 12d10
data_offset = 2bbc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number aef
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = af0, mft_size = 12d10
data_offset = 2bc000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number af0
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = af1, mft_size = 12d10
data_offset = 2bc400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number af1
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = af2, mft_size = 12d10
data_offset = 2bc800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =

400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd

CMFTEntry::GetFileName: $FILE_NAME attribute was not fou


CMFTEntry: MFT entry number af2
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = af3, mft_size = 12d10
data_offset = 2bcc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = af4, mft_size = 12d10
data_offset = 2bd000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number af4
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = af5, mft_size = 12d10
data_offset = 2bd400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = af6, mft_size = 12d10
data_offset = 2bd800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = af7, mft_size = 12d10
data_offset = 2bdc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = af8, mft_size = 12d10
data_offset = 2be000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = af9, mft_size = 12d10
data_offset = 2be400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = afa, mft_size = 12d10
data_offset = 2be800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number afa
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = afb, mft_size = 12d10
data_offset = 2bec00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou

12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000


12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000

CMFTEntry: MFT entry number afb


CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = afc, mft_size = 12d10
data_offset = 2bf000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = afd, mft_size = 12d10
data_offset = 2bf400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number afd
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = afe, mft_size = 12d10
data_offset = 2bf800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number afe
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = aff, mft_size = 12d10
data_offset = 2bfc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number aff
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = b00, mft_size = 12d10
data_offset = 2c0000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number b00
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = b01, mft_size = 12d10
data_offset = 2c0400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number b01
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = b02, mft_size = 12d10
data_offset = 2c0800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = b03, mft_size = 12d10
data_offset = 2c0c00, data_size = 400, file_size

12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 -

cache = 1550020, cache_offset = 0, cache_size =


Reading MFT entry. number = b04, mft_size = 12d10
data_offset = 2c1000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number b04
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = b05, mft_size = 12d10
data_offset = 2c1400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number b05
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = b06, mft_size = 12d10
data_offset = 2c1800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number b06
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = b07, mft_size = 12d10
data_offset = 2c1c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number b07
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = b08, mft_size = 12d10
data_offset = 2c2000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number b08
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = b09, mft_size = 12d10
data_offset = 2c2400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number b09
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = b0a, mft_size = 12d10
data_offset = 2c2800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =

400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000

CMFTEntry::GetFileName: $FILE_NAME attribute was not fou


CMFTEntry: MFT entry number b0a
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = b0b, mft_size = 12d10
data_offset = 2c2c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = b0c, mft_size = 12d10
data_offset = 2c3000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number b0c
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = b0d, mft_size = 12d10
data_offset = 2c3400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number b0d
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = b0e, mft_size = 12d10
data_offset = 2c3800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number b0e
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = b0f, mft_size = 12d10
data_offset = 2c3c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number b0f
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = b10, mft_size = 12d10
data_offset = 2c4000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number b10
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = b11, mft_size = 12d10
data_offset = 2c4400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =

12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 -

CMFTEntry::GetFileName: $FILE_NAME attribute was not fou


CMFTEntry: MFT entry number b11
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = b12, mft_size = 12d10
data_offset = 2c4800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number b12
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = b13, mft_size = 12d10
data_offset = 2c4c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number b13
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = b14, mft_size = 12d10
data_offset = 2c5000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number b14
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = b15, mft_size = 12d10
data_offset = 2c5400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number b15
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = b16, mft_size = 12d10
data_offset = 2c5800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number b16
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = b17, mft_size = 12d10
data_offset = 2c5c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number b17
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = b18, mft_size = 12d10
data_offset = 2c6000, data_size = 400, file_size

= 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000

cache = 1550020, cache_offset = 0, cache_size =


CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number b18
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = b19, mft_size = 12d10
data_offset = 2c6400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number b19
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = b1a, mft_size = 12d10
data_offset = 2c6800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number b1a
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = b1b, mft_size = 12d10
data_offset = 2c6c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number b1b
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = b1c, mft_size = 12d10
data_offset = 2c7000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number b1c
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = b1d, mft_size = 12d10
data_offset = 2c7400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = b1e, mft_size = 12d10
data_offset = 2c7800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number b1e
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = b1f, mft_size = 12d10
data_offset = 2c7c00, data_size = 400, file_size

12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 -

cache = 1550020, cache_offset = 0, cache_size =


CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number b1f
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = b20, mft_size = 12d10
data_offset = 2c8000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number b20
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = b21, mft_size = 12d10
data_offset = 2c8400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number b21
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = b22, mft_size = 12d10
data_offset = 2c8800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number b22
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = b23, mft_size = 12d10
data_offset = 2c8c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number b23
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = b24, mft_size = 12d10
data_offset = 2c9000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number b24
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = b25, mft_size = 12d10
data_offset = 2c9400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number b25
CEFSContainer::AddFile: invalid File name. rc = 111

12:31:53 12:31:53 = 4b44000


12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 -

Reading MFT entry. number = b26, mft_size = 12d10


data_offset = 2c9800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number b26
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = b27, mft_size = 12d10
data_offset = 2c9c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number b27
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = b28, mft_size = 12d10
data_offset = 2ca000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = b29, mft_size = 12d10
data_offset = 2ca400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = b2a, mft_size = 12d10
data_offset = 2ca800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = b2b, mft_size = 12d10
data_offset = 2cac00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = b2c, mft_size = 12d10
data_offset = 2cb000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number b2c
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = b2d, mft_size = 12d10
data_offset = 2cb400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number b2d
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = b2e, mft_size = 12d10
data_offset = 2cb800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =

400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 -

CMFTEntry::GetFileName: $FILE_NAME attribute was not fou


CMFTEntry: MFT entry number b2e
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = b2f, mft_size = 12d10
data_offset = 2cbc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number b2f
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = b30, mft_size = 12d10
data_offset = 2cc000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number b30
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = b31, mft_size = 12d10
data_offset = 2cc400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number b31
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = b32, mft_size = 12d10
data_offset = 2cc800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number b32
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = b33, mft_size = 12d10
data_offset = 2ccc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number b33
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = b34, mft_size = 12d10
data_offset = 2cd000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number b34
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = b35, mft_size = 12d10

12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd

data_offset = 2cd400, data_size = 400, file_size


cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number b35
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = b36, mft_size = 12d10
data_offset = 2cd800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number b36
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = b37, mft_size = 12d10
data_offset = 2cdc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number b37
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = b38, mft_size = 12d10
data_offset = 2ce000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number b38
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = b39, mft_size = 12d10
data_offset = 2ce400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number b39
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = b3a, mft_size = 12d10
data_offset = 2ce800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number b3a
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = b3b, mft_size = 12d10
data_offset = 2cec00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou

12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000


12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 -

CMFTEntry: MFT entry number b3b


CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = b3c, mft_size = 12d10
data_offset = 2cf000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number b3c
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = b3d, mft_size = 12d10
data_offset = 2cf400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = b3e, mft_size = 12d10
data_offset = 2cf800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number b3e
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = b3f, mft_size = 12d10
data_offset = 2cfc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number b3f
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = b40, mft_size = 12d10
data_offset = 2d0000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number b40
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = b41, mft_size = 12d10
data_offset = 2d0400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number b41
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = b42, mft_size = 12d10
data_offset = 2d0800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number b42

12:31:53 12:31:53 12:31:53 = 4b44000


12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000

CEFSContainer::AddFile: invalid File name. rc = 111


Reading MFT entry. number = b43, mft_size = 12d10
data_offset = 2d0c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number b43
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = b44, mft_size = 12d10
data_offset = 2d1000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number b44
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = b45, mft_size = 12d10
data_offset = 2d1400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number b45
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = b46, mft_size = 12d10
data_offset = 2d1800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number b46
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = b47, mft_size = 12d10
data_offset = 2d1c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number b47
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = b48, mft_size = 12d10
data_offset = 2d2000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number b48
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = b49, mft_size = 12d10
data_offset = 2d2400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =

12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 -

CMFTEntry::GetFileName: $FILE_NAME attribute was not fou


CMFTEntry: MFT entry number b49
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = b4a, mft_size = 12d10
data_offset = 2d2800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number b4a
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = b4b, mft_size = 12d10
data_offset = 2d2c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number b4b
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = b4c, mft_size = 12d10
data_offset = 2d3000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number b4c
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = b4d, mft_size = 12d10
data_offset = 2d3400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number b4d
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = b4e, mft_size = 12d10
data_offset = 2d3800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number b4e
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = b4f, mft_size = 12d10
data_offset = 2d3c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number b4f
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = b50, mft_size = 12d10
data_offset = 2d4000, data_size = 400, file_size

= 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 -

cache = 1550020, cache_offset = 0, cache_size =


CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number b50
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = b51, mft_size = 12d10
data_offset = 2d4400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number b51
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = b52, mft_size = 12d10
data_offset = 2d4800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number b52
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = b53, mft_size = 12d10
data_offset = 2d4c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number b53
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = b54, mft_size = 12d10
data_offset = 2d5000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = b55, mft_size = 12d10
data_offset = 2d5400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = b56, mft_size = 12d10
data_offset = 2d5800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number b56
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = b57, mft_size = 12d10
data_offset = 2d5c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = b58, mft_size = 12d10
data_offset = 2d6000, data_size = 400, file_size

= 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000

cache = 1550020, cache_offset = 0, cache_size =


CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number b58
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = b59, mft_size = 12d10
data_offset = 2d6400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = b5a, mft_size = 12d10
data_offset = 2d6800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number b5a
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = b5b, mft_size = 12d10
data_offset = 2d6c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number b5b
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = b5c, mft_size = 12d10
data_offset = 2d7000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number b5c
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = b5d, mft_size = 12d10
data_offset = 2d7400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number b5d
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = b5e, mft_size = 12d10
data_offset = 2d7800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number b5e
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = b5f, mft_size = 12d10
data_offset = 2d7c00, data_size = 400, file_size

12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 -

cache = 1550020, cache_offset = 0, cache_size =


CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number b5f
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = b60, mft_size = 12d10
data_offset = 2d8000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number b60
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = b61, mft_size = 12d10
data_offset = 2d8400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number b61
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = b62, mft_size = 12d10
data_offset = 2d8800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number b62
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = b63, mft_size = 12d10
data_offset = 2d8c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = b64, mft_size = 12d10
data_offset = 2d9000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = b65, mft_size = 12d10
data_offset = 2d9400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number b65
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = b66, mft_size = 12d10
data_offset = 2d9800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number b66

12:31:53 12:31:53 12:31:53 = 4b44000


12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 -

CEFSContainer::AddFile: invalid File name. rc = 111


Reading MFT entry. number = b67, mft_size = 12d10
data_offset = 2d9c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number b67
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = b68, mft_size = 12d10
data_offset = 2da000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number b68
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = b69, mft_size = 12d10
data_offset = 2da400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number b69
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = b6a, mft_size = 12d10
data_offset = 2da800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number b6a
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = b6b, mft_size = 12d10
data_offset = 2dac00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number b6b
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = b6c, mft_size = 12d10
data_offset = 2db000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = b6d, mft_size = 12d10
data_offset = 2db400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = b6e, mft_size = 12d10
data_offset = 2db800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =

400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 -

CMFTEntry::GetFileName: $FILE_NAME attribute was not fou


CMFTEntry: MFT entry number b6e
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = b6f, mft_size = 12d10
data_offset = 2dbc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number b6f
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = b70, mft_size = 12d10
data_offset = 2dc000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number b70
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = b71, mft_size = 12d10
data_offset = 2dc400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number b71
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = b72, mft_size = 12d10
data_offset = 2dc800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number b72
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = b73, mft_size = 12d10
data_offset = 2dcc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number b73
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = b74, mft_size = 12d10
data_offset = 2dd000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number b74
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = b75, mft_size = 12d10

12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd

data_offset = 2dd400, data_size = 400, file_size


cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number b75
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = b76, mft_size = 12d10
data_offset = 2dd800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number b76
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = b77, mft_size = 12d10
data_offset = 2ddc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number b77
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = b78, mft_size = 12d10
data_offset = 2de000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number b78
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = b79, mft_size = 12d10
data_offset = 2de400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number b79
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = b7a, mft_size = 12d10
data_offset = 2de800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number b7a
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = b7b, mft_size = 12d10
data_offset = 2dec00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou

12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000


12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd

CMFTEntry: MFT entry number b7b


CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = b7c, mft_size = 12d10
data_offset = 2df000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number b7c
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = b7d, mft_size = 12d10
data_offset = 2df400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = b7e, mft_size = 12d10
data_offset = 2df800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = b7f, mft_size = 12d10
data_offset = 2dfc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number b7f
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = b80, mft_size = 12d10
data_offset = 2e0000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number b80
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = b81, mft_size = 12d10
data_offset = 2e0400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = b82, mft_size = 12d10
data_offset = 2e0800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number b82
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = b83, mft_size = 12d10
data_offset = 2e0c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou

12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000


12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 -

CMFTEntry: MFT entry number b83


CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = b84, mft_size = 12d10
data_offset = 2e1000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number b84
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = b85, mft_size = 12d10
data_offset = 2e1400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number b85
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = b86, mft_size = 12d10
data_offset = 2e1800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = b87, mft_size = 12d10
data_offset = 2e1c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number b87
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = b88, mft_size = 12d10
data_offset = 2e2000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number b88
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = b89, mft_size = 12d10
data_offset = 2e2400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number b89
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = b8a, mft_size = 12d10
data_offset = 2e2800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number b8a

12:31:53 12:31:53 12:31:53 = 4b44000


12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000

CEFSContainer::AddFile: invalid File name. rc = 111


Reading MFT entry. number = b8b, mft_size = 12d10
data_offset = 2e2c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number b8b
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = b8c, mft_size = 12d10
data_offset = 2e3000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number b8c
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = b8d, mft_size = 12d10
data_offset = 2e3400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number b8d
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = b8e, mft_size = 12d10
data_offset = 2e3800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number b8e
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = b8f, mft_size = 12d10
data_offset = 2e3c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number b8f
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = b90, mft_size = 12d10
data_offset = 2e4000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number b90
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = b91, mft_size = 12d10
data_offset = 2e4400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =

12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 -

CMFTEntry::GetFileName: $FILE_NAME attribute was not fou


CMFTEntry: MFT entry number b91
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = b92, mft_size = 12d10
data_offset = 2e4800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number b92
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = b93, mft_size = 12d10
data_offset = 2e4c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number b93
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = b94, mft_size = 12d10
data_offset = 2e5000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number b94
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = b95, mft_size = 12d10
data_offset = 2e5400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = b96, mft_size = 12d10
data_offset = 2e5800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number b96
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = b97, mft_size = 12d10
data_offset = 2e5c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number b97
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = b98, mft_size = 12d10
data_offset = 2e6000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = b99, mft_size = 12d10

12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 -

data_offset = 2e6400, data_size = 400, file_size


cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number b99
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = b9a, mft_size = 12d10
data_offset = 2e6800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number b9a
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = b9b, mft_size = 12d10
data_offset = 2e6c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number b9b
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = b9c, mft_size = 12d10
data_offset = 2e7000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number b9c
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = b9d, mft_size = 12d10
data_offset = 2e7400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = b9e, mft_size = 12d10
data_offset = 2e7800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number b9e
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = b9f, mft_size = 12d10
data_offset = 2e7c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number b9f
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = ba0, mft_size = 12d10
data_offset = 2e8000, data_size = 400, file_size

= 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000

cache = 1550020, cache_offset = 0, cache_size =


Reading MFT entry. number = ba1, mft_size = 12d10
data_offset = 2e8400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number ba1
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = ba2, mft_size = 12d10
data_offset = 2e8800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = ba3, mft_size = 12d10
data_offset = 2e8c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = ba4, mft_size = 12d10
data_offset = 2e9000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = ba5, mft_size = 12d10
data_offset = 2e9400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = ba6, mft_size = 12d10
data_offset = 2e9800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number ba6
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = ba7, mft_size = 12d10
data_offset = 2e9c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = ba8, mft_size = 12d10
data_offset = 2ea000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number ba8
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = ba9, mft_size = 12d10
data_offset = 2ea400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =

12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 -

CMFTEntry::GetFileName: $FILE_NAME attribute was not fou


CMFTEntry: MFT entry number ba9
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = baa, mft_size = 12d10
data_offset = 2ea800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number baa
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = bab, mft_size = 12d10
data_offset = 2eac00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number bab
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = bac, mft_size = 12d10
data_offset = 2eb000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = bad, mft_size = 12d10
data_offset = 2eb400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number bad
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = bae, mft_size = 12d10
data_offset = 2eb800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = baf, mft_size = 12d10
data_offset = 2ebc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number baf
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = bb0, mft_size = 12d10
data_offset = 2ec000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number bb0
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = bb1, mft_size = 12d10

12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 -

data_offset = 2ec400, data_size = 400, file_size


cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = bb2, mft_size = 12d10
data_offset = 2ec800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number bb2
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = bb3, mft_size = 12d10
data_offset = 2ecc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number bb3
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = bb4, mft_size = 12d10
data_offset = 2ed000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number bb4
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = bb5, mft_size = 12d10
data_offset = 2ed400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number bb5
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = bb6, mft_size = 12d10
data_offset = 2ed800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number bb6
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = bb7, mft_size = 12d10
data_offset = 2edc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number bb7
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = bb8, mft_size = 12d10
data_offset = 2ee000, data_size = 400, file_size

= 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000

cache = 1550020, cache_offset = 0, cache_size =


CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number bb8
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = bb9, mft_size = 12d10
data_offset = 2ee400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number bb9
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = bba, mft_size = 12d10
data_offset = 2ee800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number bba
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = bbb, mft_size = 12d10
data_offset = 2eec00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number bbb
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = bbc, mft_size = 12d10
data_offset = 2ef000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number bbc
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = bbd, mft_size = 12d10
data_offset = 2ef400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number bbd
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = bbe, mft_size = 12d10
data_offset = 2ef800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = bbf, mft_size = 12d10
data_offset = 2efc00, data_size = 400, file_size

12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 -

cache = 1550020, cache_offset = 0, cache_size =


CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number bbf
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = bc0, mft_size = 12d10
data_offset = 2f0000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number bc0
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = bc1, mft_size = 12d10
data_offset = 2f0400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number bc1
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = bc2, mft_size = 12d10
data_offset = 2f0800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number bc2
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = bc3, mft_size = 12d10
data_offset = 2f0c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number bc3
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = bc4, mft_size = 12d10
data_offset = 2f1000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = bc5, mft_size = 12d10
data_offset = 2f1400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number bc5
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = bc6, mft_size = 12d10
data_offset = 2f1800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =

400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 -

CMFTEntry::GetFileName: $FILE_NAME attribute was not fou


CMFTEntry: MFT entry number bc6
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = bc7, mft_size = 12d10
data_offset = 2f1c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number bc7
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = bc8, mft_size = 12d10
data_offset = 2f2000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number bc8
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = bc9, mft_size = 12d10
data_offset = 2f2400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = bca, mft_size = 12d10
data_offset = 2f2800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number bca
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = bcb, mft_size = 12d10
data_offset = 2f2c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = bcc, mft_size = 12d10
data_offset = 2f3000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = bcd, mft_size = 12d10
data_offset = 2f3400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number bcd
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = bce, mft_size = 12d10
data_offset = 2f3800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =

400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 -

CMFTEntry::GetFileName: $FILE_NAME attribute was not fou


CMFTEntry: MFT entry number bce
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = bcf, mft_size = 12d10
data_offset = 2f3c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number bcf
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = bd0, mft_size = 12d10
data_offset = 2f4000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number bd0
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = bd1, mft_size = 12d10
data_offset = 2f4400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number bd1
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = bd2, mft_size = 12d10
data_offset = 2f4800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number bd2
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = bd3, mft_size = 12d10
data_offset = 2f4c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number bd3
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = bd4, mft_size = 12d10
data_offset = 2f5000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number bd4
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = bd5, mft_size = 12d10

12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 -

data_offset = 2f5400, data_size = 400, file_size


cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = bd6, mft_size = 12d10
data_offset = 2f5800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number bd6
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = bd7, mft_size = 12d10
data_offset = 2f5c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number bd7
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = bd8, mft_size = 12d10
data_offset = 2f6000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number bd8
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = bd9, mft_size = 12d10
data_offset = 2f6400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number bd9
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = bda, mft_size = 12d10
data_offset = 2f6800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = bdb, mft_size = 12d10
data_offset = 2f6c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number bdb
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = bdc, mft_size = 12d10
data_offset = 2f7000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou

nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd

CMFTEntry: MFT entry number bdc


CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = bdd, mft_size = 12d10
data_offset = 2f7400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = bde, mft_size = 12d10
data_offset = 2f7800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number bde
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = bdf, mft_size = 12d10
data_offset = 2f7c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number bdf
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = be0, mft_size = 12d10
data_offset = 2f8000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number be0
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = be1, mft_size = 12d10
data_offset = 2f8400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number be1
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = be2, mft_size = 12d10
data_offset = 2f8800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number be2
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = be3, mft_size = 12d10
data_offset = 2f8c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou

12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000


12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 -

CMFTEntry: MFT entry number be3


CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = be4, mft_size = 12d10
data_offset = 2f9000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number be4
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = be5, mft_size = 12d10
data_offset = 2f9400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = be6, mft_size = 12d10
data_offset = 2f9800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number be6
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = be7, mft_size = 12d10
data_offset = 2f9c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number be7
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = be8, mft_size = 12d10
data_offset = 2fa000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number be8
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = be9, mft_size = 12d10
data_offset = 2fa400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number be9
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = bea, mft_size = 12d10
data_offset = 2fa800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number bea

12:31:53 12:31:53 12:31:53 = 4b44000


12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 -

CEFSContainer::AddFile: invalid File name. rc = 111


Reading MFT entry. number = beb, mft_size = 12d10
data_offset = 2fac00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = bec, mft_size = 12d10
data_offset = 2fb000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = bed, mft_size = 12d10
data_offset = 2fb400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number bed
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = bee, mft_size = 12d10
data_offset = 2fb800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number bee
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = bef, mft_size = 12d10
data_offset = 2fbc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = bf0, mft_size = 12d10
data_offset = 2fc000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number bf0
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = bf1, mft_size = 12d10
data_offset = 2fc400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number bf1
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = bf2, mft_size = 12d10
data_offset = 2fc800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number bf2

12:31:53 12:31:53 12:31:53 = 4b44000


12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 -

CEFSContainer::AddFile: invalid File name. rc = 111


Reading MFT entry. number = bf3, mft_size = 12d10
data_offset = 2fcc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number bf3
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = bf4, mft_size = 12d10
data_offset = 2fd000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number bf4
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = bf5, mft_size = 12d10
data_offset = 2fd400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number bf5
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = bf6, mft_size = 12d10
data_offset = 2fd800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number bf6
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = bf7, mft_size = 12d10
data_offset = 2fdc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = bf8, mft_size = 12d10
data_offset = 2fe000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number bf8
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = bf9, mft_size = 12d10
data_offset = 2fe400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number bf9
CEFSContainer::AddFile: invalid File name. rc = 111

12:31:53 12:31:53 = 4b44000


12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 -

Reading MFT entry. number = bfa, mft_size = 12d10


data_offset = 2fe800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number bfa
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = bfb, mft_size = 12d10
data_offset = 2fec00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number bfb
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = bfc, mft_size = 12d10
data_offset = 2ff000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number bfc
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = bfd, mft_size = 12d10
data_offset = 2ff400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number bfd
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = bfe, mft_size = 12d10
data_offset = 2ff800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number bfe
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = bff, mft_size = 12d10
data_offset = 2ffc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number bff
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = c00, mft_size = 12d10
data_offset = 300000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = c01, mft_size = 12d10

12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 -

data_offset = 300400, data_size = 400, file_size


cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number c01
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = c02, mft_size = 12d10
data_offset = 300800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number c02
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = c03, mft_size = 12d10
data_offset = 300c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number c03
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = c04, mft_size = 12d10
data_offset = 301000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = c05, mft_size = 12d10
data_offset = 301400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number c05
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = c06, mft_size = 12d10
data_offset = 301800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number c06
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = c07, mft_size = 12d10
data_offset = 301c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number c07
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = c08, mft_size = 12d10
data_offset = 302000, data_size = 400, file_size

= 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 -

cache = 1550020, cache_offset = 0, cache_size =


CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number c08
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = c09, mft_size = 12d10
data_offset = 302400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number c09
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = c0a, mft_size = 12d10
data_offset = 302800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number c0a
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = c0b, mft_size = 12d10
data_offset = 302c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = c0c, mft_size = 12d10
data_offset = 303000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = c0d, mft_size = 12d10
data_offset = 303400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = c0e, mft_size = 12d10
data_offset = 303800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number c0e
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = c0f, mft_size = 12d10
data_offset = 303c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number c0f
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = c10, mft_size = 12d10
data_offset = 304000, data_size = 400, file_size

= 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000

cache = 1550020, cache_offset = 0, cache_size =


Reading MFT entry. number = c11, mft_size = 12d10
data_offset = 304400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number c11
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = c12, mft_size = 12d10
data_offset = 304800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number c12
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = c13, mft_size = 12d10
data_offset = 304c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number c13
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = c14, mft_size = 12d10
data_offset = 305000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number c14
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = c15, mft_size = 12d10
data_offset = 305400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number c15
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = c16, mft_size = 12d10
data_offset = 305800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number c16
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = c17, mft_size = 12d10
data_offset = 305c00, data_size = 400, file_size

12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 -

cache = 1550020, cache_offset = 0, cache_size =


CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number c17
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = c18, mft_size = 12d10
data_offset = 306000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number c18
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = c19, mft_size = 12d10
data_offset = 306400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number c19
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = c1a, mft_size = 12d10
data_offset = 306800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number c1a
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = c1b, mft_size = 12d10
data_offset = 306c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = c1c, mft_size = 12d10
data_offset = 307000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number c1c
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = c1d, mft_size = 12d10
data_offset = 307400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = c1e, mft_size = 12d10
data_offset = 307800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number c1e

12:31:53 12:31:53 12:31:53 = 4b44000


12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 -

CEFSContainer::AddFile: invalid File name. rc = 111


Reading MFT entry. number = c1f, mft_size = 12d10
data_offset = 307c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = c20, mft_size = 12d10
data_offset = 308000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = c21, mft_size = 12d10
data_offset = 308400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number c21
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = c22, mft_size = 12d10
data_offset = 308800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number c22
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = c23, mft_size = 12d10
data_offset = 308c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number c23
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = c24, mft_size = 12d10
data_offset = 309000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number c24
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = c25, mft_size = 12d10
data_offset = 309400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number c25
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = c26, mft_size = 12d10
data_offset = 309800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =

400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000

CMFTEntry::GetFileName: $FILE_NAME attribute was not fou


CMFTEntry: MFT entry number c26
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = c27, mft_size = 12d10
data_offset = 309c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number c27
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = c28, mft_size = 12d10
data_offset = 30a000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number c28
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = c29, mft_size = 12d10
data_offset = 30a400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number c29
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = c2a, mft_size = 12d10
data_offset = 30a800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number c2a
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = c2b, mft_size = 12d10
data_offset = 30ac00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number c2b
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = c2c, mft_size = 12d10
data_offset = 30b000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = c2d, mft_size = 12d10
data_offset = 30b400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =

12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 -

CMFTEntry::GetFileName: $FILE_NAME attribute was not fou


CMFTEntry: MFT entry number c2d
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = c2e, mft_size = 12d10
data_offset = 30b800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number c2e
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = c2f, mft_size = 12d10
data_offset = 30bc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number c2f
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = c30, mft_size = 12d10
data_offset = 30c000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number c30
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = c31, mft_size = 12d10
data_offset = 30c400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number c31
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = c32, mft_size = 12d10
data_offset = 30c800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number c32
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = c33, mft_size = 12d10
data_offset = 30cc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number c33
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = c34, mft_size = 12d10
data_offset = 30d000, data_size = 400, file_size

= 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 -

cache = 1550020, cache_offset = 0, cache_size =


Reading MFT entry. number = c35, mft_size = 12d10
data_offset = 30d400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = c36, mft_size = 12d10
data_offset = 30d800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = c37, mft_size = 12d10
data_offset = 30dc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = c38, mft_size = 12d10
data_offset = 30e000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number c38
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = c39, mft_size = 12d10
data_offset = 30e400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number c39
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = c3a, mft_size = 12d10
data_offset = 30e800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = c3b, mft_size = 12d10
data_offset = 30ec00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = c3c, mft_size = 12d10
data_offset = 30f000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = c3d, mft_size = 12d10
data_offset = 30f400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = c3e, mft_size = 12d10
data_offset = 30f800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =

400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 -

Reading MFT entry. number = c3f, mft_size = 12d10


data_offset = 30fc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = c40, mft_size = 12d10
data_offset = 310000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = c41, mft_size = 12d10
data_offset = 310400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = c42, mft_size = 12d10
data_offset = 310800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = c43, mft_size = 12d10
data_offset = 310c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = c44, mft_size = 12d10
data_offset = 311000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = c45, mft_size = 12d10
data_offset = 311400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = c46, mft_size = 12d10
data_offset = 311800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = c47, mft_size = 12d10
data_offset = 311c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = c48, mft_size = 12d10
data_offset = 312000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = c49, mft_size = 12d10
data_offset = 312400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = c4a, mft_size = 12d10
data_offset = 312800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =

400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000

Reading MFT entry. number = c4b, mft_size = 12d10


data_offset = 312c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = c4c, mft_size = 12d10
data_offset = 313000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = c4d, mft_size = 12d10
data_offset = 313400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number c4d
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = c4e, mft_size = 12d10
data_offset = 313800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number c4e
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = c4f, mft_size = 12d10
data_offset = 313c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = c50, mft_size = 12d10
data_offset = 314000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = c51, mft_size = 12d10
data_offset = 314400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number c51
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = c52, mft_size = 12d10
data_offset = 314800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number c52
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = c53, mft_size = 12d10
data_offset = 314c00, data_size = 400, file_size

12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000

cache = 1550020, cache_offset = 0, cache_size =


Reading MFT entry. number = c54, mft_size = 12d10
data_offset = 315000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = c55, mft_size = 12d10
data_offset = 315400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number c55
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = c56, mft_size = 12d10
data_offset = 315800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number c56
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = c57, mft_size = 12d10
data_offset = 315c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = c58, mft_size = 12d10
data_offset = 316000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number c58
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = c59, mft_size = 12d10
data_offset = 316400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number c59
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = c5a, mft_size = 12d10
data_offset = 316800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number c5a
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = c5b, mft_size = 12d10
data_offset = 316c00, data_size = 400, file_size

12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 -

cache = 1550020, cache_offset = 0, cache_size =


Reading MFT entry. number = c5c, mft_size = 12d10
data_offset = 317000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number c5c
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = c5d, mft_size = 12d10
data_offset = 317400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number c5d
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = c5e, mft_size = 12d10
data_offset = 317800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number c5e
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = c5f, mft_size = 12d10
data_offset = 317c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = c60, mft_size = 12d10
data_offset = 318000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number c60
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = c61, mft_size = 12d10
data_offset = 318400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number c61
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = c62, mft_size = 12d10
data_offset = 318800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number c62

12:31:53 12:31:53 12:31:53 = 4b44000


12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 -

CEFSContainer::AddFile: invalid File name. rc = 111


Reading MFT entry. number = c63, mft_size = 12d10
data_offset = 318c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number c63
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = c64, mft_size = 12d10
data_offset = 319000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number c64
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = c65, mft_size = 12d10
data_offset = 319400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number c65
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = c66, mft_size = 12d10
data_offset = 319800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = c67, mft_size = 12d10
data_offset = 319c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = c68, mft_size = 12d10
data_offset = 31a000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number c68
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = c69, mft_size = 12d10
data_offset = 31a400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number c69
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = c6a, mft_size = 12d10
data_offset = 31a800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =

400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000

CMFTEntry::GetFileName: $FILE_NAME attribute was not fou


CMFTEntry: MFT entry number c6a
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = c6b, mft_size = 12d10
data_offset = 31ac00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number c6b
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = c6c, mft_size = 12d10
data_offset = 31b000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number c6c
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = c6d, mft_size = 12d10
data_offset = 31b400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number c6d
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = c6e, mft_size = 12d10
data_offset = 31b800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number c6e
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = c6f, mft_size = 12d10
data_offset = 31bc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = c70, mft_size = 12d10
data_offset = 31c000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number c70
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = c71, mft_size = 12d10
data_offset = 31c400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =

12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 -

CMFTEntry::GetFileName: $FILE_NAME attribute was not fou


CMFTEntry: MFT entry number c71
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = c72, mft_size = 12d10
data_offset = 31c800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number c72
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = c73, mft_size = 12d10
data_offset = 31cc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number c73
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = c74, mft_size = 12d10
data_offset = 31d000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number c74
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = c75, mft_size = 12d10
data_offset = 31d400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number c75
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = c76, mft_size = 12d10
data_offset = 31d800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number c76
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = c77, mft_size = 12d10
data_offset = 31dc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = c78, mft_size = 12d10
data_offset = 31e000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = c79, mft_size = 12d10

12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 -

data_offset = 31e400, data_size = 400, file_size


cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = c7a, mft_size = 12d10
data_offset = 31e800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = c7b, mft_size = 12d10
data_offset = 31ec00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = c7c, mft_size = 12d10
data_offset = 31f000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = c7d, mft_size = 12d10
data_offset = 31f400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = c7e, mft_size = 12d10
data_offset = 31f800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number c7e
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = c7f, mft_size = 12d10
data_offset = 31fc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = c80, mft_size = 12d10
data_offset = 320000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number c80
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = c81, mft_size = 12d10
data_offset = 320400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = c82, mft_size = 12d10
data_offset = 320800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number c82

12:31:53 12:31:53 12:31:53 = 4b44000


12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000

CEFSContainer::AddFile: invalid File name. rc = 111


Reading MFT entry. number = c83, mft_size = 12d10
data_offset = 320c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number c83
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = c84, mft_size = 12d10
data_offset = 321000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number c84
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = c85, mft_size = 12d10
data_offset = 321400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number c85
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = c86, mft_size = 12d10
data_offset = 321800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number c86
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = c87, mft_size = 12d10
data_offset = 321c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number c87
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = c88, mft_size = 12d10
data_offset = 322000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number c88
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = c89, mft_size = 12d10
data_offset = 322400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =

12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 -

CMFTEntry::GetFileName: $FILE_NAME attribute was not fou


CMFTEntry: MFT entry number c89
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = c8a, mft_size = 12d10
data_offset = 322800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number c8a
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = c8b, mft_size = 12d10
data_offset = 322c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number c8b
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = c8c, mft_size = 12d10
data_offset = 323000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = c8d, mft_size = 12d10
data_offset = 323400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number c8d
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = c8e, mft_size = 12d10
data_offset = 323800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = c8f, mft_size = 12d10
data_offset = 323c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = c90, mft_size = 12d10
data_offset = 324000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = c91, mft_size = 12d10
data_offset = 324400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = c92, mft_size = 12d10
data_offset = 324800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =

400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 -

Reading MFT entry. number = c93, mft_size = 12d10


data_offset = 324c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = c94, mft_size = 12d10
data_offset = 325000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number c94
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = c95, mft_size = 12d10
data_offset = 325400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number c95
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = c96, mft_size = 12d10
data_offset = 325800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = c97, mft_size = 12d10
data_offset = 325c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number c97
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = c98, mft_size = 12d10
data_offset = 326000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number c98
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = c99, mft_size = 12d10
data_offset = 326400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number c99
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = c9a, mft_size = 12d10
data_offset = 326800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =

400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000

CMFTEntry::GetFileName: $FILE_NAME attribute was not fou


CMFTEntry: MFT entry number c9a
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = c9b, mft_size = 12d10
data_offset = 326c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = c9c, mft_size = 12d10
data_offset = 327000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number c9c
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = c9d, mft_size = 12d10
data_offset = 327400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number c9d
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = c9e, mft_size = 12d10
data_offset = 327800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number c9e
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = c9f, mft_size = 12d10
data_offset = 327c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number c9f
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = ca0, mft_size = 12d10
data_offset = 328000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number ca0
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = ca1, mft_size = 12d10
data_offset = 328400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =

12:31:53 12:31:53 = 4b44000


12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 -

Reading MFT entry. number = ca2, mft_size = 12d10


data_offset = 328800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number ca2
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = ca3, mft_size = 12d10
data_offset = 328c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number ca3
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = ca4, mft_size = 12d10
data_offset = 329000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = ca5, mft_size = 12d10
data_offset = 329400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number ca5
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = ca6, mft_size = 12d10
data_offset = 329800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number ca6
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = ca7, mft_size = 12d10
data_offset = 329c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = ca8, mft_size = 12d10
data_offset = 32a000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = ca9, mft_size = 12d10
data_offset = 32a400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = caa, mft_size = 12d10
data_offset = 32a800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =

400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000

Reading MFT entry. number = cab, mft_size = 12d10


data_offset = 32ac00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = cac, mft_size = 12d10
data_offset = 32b000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = cad, mft_size = 12d10
data_offset = 32b400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = cae, mft_size = 12d10
data_offset = 32b800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = caf, mft_size = 12d10
data_offset = 32bc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = cb0, mft_size = 12d10
data_offset = 32c000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = cb1, mft_size = 12d10
data_offset = 32c400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = cb2, mft_size = 12d10
data_offset = 32c800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = cb3, mft_size = 12d10
data_offset = 32cc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number cb3
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = cb4, mft_size = 12d10
data_offset = 32d000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = cb5, mft_size = 12d10
data_offset = 32d400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =

12:31:53 12:31:53 = 4b44000


12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000

Reading MFT entry. number = cb6, mft_size = 12d10


data_offset = 32d800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number cb6
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = cb7, mft_size = 12d10
data_offset = 32dc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number cb7
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = cb8, mft_size = 12d10
data_offset = 32e000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = cb9, mft_size = 12d10
data_offset = 32e400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number cb9
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = cba, mft_size = 12d10
data_offset = 32e800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = cbb, mft_size = 12d10
data_offset = 32ec00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number cbb
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = cbc, mft_size = 12d10
data_offset = 32f000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number cbc
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = cbd, mft_size = 12d10
data_offset = 32f400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =

12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000

CMFTEntry::GetFileName: $FILE_NAME attribute was not fou


CMFTEntry: MFT entry number cbd
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = cbe, mft_size = 12d10
data_offset = 32f800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = cbf, mft_size = 12d10
data_offset = 32fc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number cbf
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = cc0, mft_size = 12d10
data_offset = 330000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = cc1, mft_size = 12d10
data_offset = 330400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number cc1
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = cc2, mft_size = 12d10
data_offset = 330800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = cc3, mft_size = 12d10
data_offset = 330c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = cc4, mft_size = 12d10
data_offset = 331000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = cc5, mft_size = 12d10
data_offset = 331400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = cc6, mft_size = 12d10
data_offset = 331800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = cc7, mft_size = 12d10
data_offset = 331c00, data_size = 400, file_size

12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000

cache = 1550020, cache_offset = 0, cache_size =


Reading MFT entry. number = cc8, mft_size = 12d10
data_offset = 332000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = cc9, mft_size = 12d10
data_offset = 332400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = cca, mft_size = 12d10
data_offset = 332800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = ccb, mft_size = 12d10
data_offset = 332c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = ccc, mft_size = 12d10
data_offset = 333000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = ccd, mft_size = 12d10
data_offset = 333400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = cce, mft_size = 12d10
data_offset = 333800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = ccf, mft_size = 12d10
data_offset = 333c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = cd0, mft_size = 12d10
data_offset = 334000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = cd1, mft_size = 12d10
data_offset = 334400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = cd2, mft_size = 12d10
data_offset = 334800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = cd3, mft_size = 12d10
data_offset = 334c00, data_size = 400, file_size

12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000

cache = 1550020, cache_offset = 0, cache_size =


Reading MFT entry. number = cd4, mft_size = 12d10
data_offset = 335000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = cd5, mft_size = 12d10
data_offset = 335400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = cd6, mft_size = 12d10
data_offset = 335800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = cd7, mft_size = 12d10
data_offset = 335c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = cd8, mft_size = 12d10
data_offset = 336000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = cd9, mft_size = 12d10
data_offset = 336400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = cda, mft_size = 12d10
data_offset = 336800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = cdb, mft_size = 12d10
data_offset = 336c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = cdc, mft_size = 12d10
data_offset = 337000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = cdd, mft_size = 12d10
data_offset = 337400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = cde, mft_size = 12d10
data_offset = 337800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = cdf, mft_size = 12d10
data_offset = 337c00, data_size = 400, file_size

12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000

cache = 1550020, cache_offset = 0, cache_size =


Reading MFT entry. number = ce0, mft_size = 12d10
data_offset = 338000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = ce1, mft_size = 12d10
data_offset = 338400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = ce2, mft_size = 12d10
data_offset = 338800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = ce3, mft_size = 12d10
data_offset = 338c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = ce4, mft_size = 12d10
data_offset = 339000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = ce5, mft_size = 12d10
data_offset = 339400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = ce6, mft_size = 12d10
data_offset = 339800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = ce7, mft_size = 12d10
data_offset = 339c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = ce8, mft_size = 12d10
data_offset = 33a000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = ce9, mft_size = 12d10
data_offset = 33a400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = cea, mft_size = 12d10
data_offset = 33a800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = ceb, mft_size = 12d10
data_offset = 33ac00, data_size = 400, file_size

12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 -

cache = 1550020, cache_offset = 0, cache_size =


Reading MFT entry. number = cec, mft_size = 12d10
data_offset = 33b000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = ced, mft_size = 12d10
data_offset = 33b400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = cee, mft_size = 12d10
data_offset = 33b800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = cef, mft_size = 12d10
data_offset = 33bc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = cf0, mft_size = 12d10
data_offset = 33c000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = cf1, mft_size = 12d10
data_offset = 33c400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = cf2, mft_size = 12d10
data_offset = 33c800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = cf3, mft_size = 12d10
data_offset = 33cc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = cf4, mft_size = 12d10
data_offset = 33d000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = cf5, mft_size = 12d10
data_offset = 33d400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = cf6, mft_size = 12d10
data_offset = 33d800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number cf6

12:31:53 12:31:53 12:31:53 = 4b44000


12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 -

CEFSContainer::AddFile: invalid File name. rc = 111


Reading MFT entry. number = cf7, mft_size = 12d10
data_offset = 33dc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number cf7
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = cf8, mft_size = 12d10
data_offset = 33e000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number cf8
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = cf9, mft_size = 12d10
data_offset = 33e400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number cf9
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = cfa, mft_size = 12d10
data_offset = 33e800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number cfa
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = cfb, mft_size = 12d10
data_offset = 33ec00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = cfc, mft_size = 12d10
data_offset = 33f000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = cfd, mft_size = 12d10
data_offset = 33f400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number cfd
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = cfe, mft_size = 12d10
data_offset = 33f800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =

400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 -

CMFTEntry::GetFileName: $FILE_NAME attribute was not fou


CMFTEntry: MFT entry number cfe
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = cff, mft_size = 12d10
data_offset = 33fc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number cff
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = d00, mft_size = 12d10
data_offset = 340000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = d01, mft_size = 12d10
data_offset = 340400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = d02, mft_size = 12d10
data_offset = 340800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number d02
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = d03, mft_size = 12d10
data_offset = 340c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = d04, mft_size = 12d10
data_offset = 341000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number d04
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = d05, mft_size = 12d10
data_offset = 341400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number d05
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = d06, mft_size = 12d10
data_offset = 341800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =

400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 -

CMFTEntry::GetFileName: $FILE_NAME attribute was not fou


CMFTEntry: MFT entry number d06
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = d07, mft_size = 12d10
data_offset = 341c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number d07
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = d08, mft_size = 12d10
data_offset = 342000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = d09, mft_size = 12d10
data_offset = 342400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = d0a, mft_size = 12d10
data_offset = 342800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number d0a
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = d0b, mft_size = 12d10
data_offset = 342c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = d0c, mft_size = 12d10
data_offset = 343000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = d0d, mft_size = 12d10
data_offset = 343400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = d0e, mft_size = 12d10
data_offset = 343800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = d0f, mft_size = 12d10
data_offset = 343c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = d10, mft_size = 12d10
data_offset = 344000, data_size = 400, file_size

= 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000

cache = 1550020, cache_offset = 0, cache_size =


CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number d10
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = d11, mft_size = 12d10
data_offset = 344400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number d11
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = d12, mft_size = 12d10
data_offset = 344800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number d12
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = d13, mft_size = 12d10
data_offset = 344c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = d14, mft_size = 12d10
data_offset = 345000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number d14
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = d15, mft_size = 12d10
data_offset = 345400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number d15
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = d16, mft_size = 12d10
data_offset = 345800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number d16
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = d17, mft_size = 12d10
data_offset = 345c00, data_size = 400, file_size

12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000

cache = 1550020, cache_offset = 0, cache_size =


Reading MFT entry. number = d18, mft_size = 12d10
data_offset = 346000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number d18
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = d19, mft_size = 12d10
data_offset = 346400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number d19
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = d1a, mft_size = 12d10
data_offset = 346800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number d1a
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = d1b, mft_size = 12d10
data_offset = 346c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number d1b
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = d1c, mft_size = 12d10
data_offset = 347000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = d1d, mft_size = 12d10
data_offset = 347400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number d1d
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = d1e, mft_size = 12d10
data_offset = 347800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = d1f, mft_size = 12d10
data_offset = 347c00, data_size = 400, file_size

12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 -

cache = 1550020, cache_offset = 0, cache_size =


Reading MFT entry. number = d20, mft_size = 12d10
data_offset = 348000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = d21, mft_size = 12d10
data_offset = 348400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = d22, mft_size = 12d10
data_offset = 348800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = d23, mft_size = 12d10
data_offset = 348c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number d23
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = d24, mft_size = 12d10
data_offset = 349000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number d24
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = d25, mft_size = 12d10
data_offset = 349400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = d26, mft_size = 12d10
data_offset = 349800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number d26
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = d27, mft_size = 12d10
data_offset = 349c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number d27
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = d28, mft_size = 12d10
data_offset = 34a000, data_size = 400, file_size

= 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000

cache = 1550020, cache_offset = 0, cache_size =


Reading MFT entry. number = d29, mft_size = 12d10
data_offset = 34a400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number d29
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = d2a, mft_size = 12d10
data_offset = 34a800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number d2a
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = d2b, mft_size = 12d10
data_offset = 34ac00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number d2b
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = d2c, mft_size = 12d10
data_offset = 34b000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number d2c
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = d2d, mft_size = 12d10
data_offset = 34b400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number d2d
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = d2e, mft_size = 12d10
data_offset = 34b800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number d2e
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = d2f, mft_size = 12d10
data_offset = 34bc00, data_size = 400, file_size

12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 -

cache = 1550020, cache_offset = 0, cache_size =


Reading MFT entry. number = d30, mft_size = 12d10
data_offset = 34c000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = d31, mft_size = 12d10
data_offset = 34c400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = d32, mft_size = 12d10
data_offset = 34c800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = d33, mft_size = 12d10
data_offset = 34cc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = d34, mft_size = 12d10
data_offset = 34d000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number d34
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = d35, mft_size = 12d10
data_offset = 34d400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number d35
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = d36, mft_size = 12d10
data_offset = 34d800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number d36
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = d37, mft_size = 12d10
data_offset = 34dc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = d38, mft_size = 12d10
data_offset = 34e000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou

nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 -

CMFTEntry: MFT entry number d38


CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = d39, mft_size = 12d10
data_offset = 34e400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = d3a, mft_size = 12d10
data_offset = 34e800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number d3a
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = d3b, mft_size = 12d10
data_offset = 34ec00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number d3b
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = d3c, mft_size = 12d10
data_offset = 34f000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number d3c
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = d3d, mft_size = 12d10
data_offset = 34f400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number d3d
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = d3e, mft_size = 12d10
data_offset = 34f800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = d3f, mft_size = 12d10
data_offset = 34fc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number d3f
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = d40, mft_size = 12d10
data_offset = 350000, data_size = 400, file_size

= 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 -

cache = 1550020, cache_offset = 0, cache_size =


CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number d40
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = d41, mft_size = 12d10
data_offset = 350400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number d41
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = d42, mft_size = 12d10
data_offset = 350800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number d42
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = d43, mft_size = 12d10
data_offset = 350c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number d43
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = d44, mft_size = 12d10
data_offset = 351000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = d45, mft_size = 12d10
data_offset = 351400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = d46, mft_size = 12d10
data_offset = 351800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = d47, mft_size = 12d10
data_offset = 351c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = d48, mft_size = 12d10
data_offset = 352000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = d49, mft_size = 12d10

12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 -

data_offset = 352400, data_size = 400, file_size


cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = d4a, mft_size = 12d10
data_offset = 352800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = d4b, mft_size = 12d10
data_offset = 352c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = d4c, mft_size = 12d10
data_offset = 353000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = d4d, mft_size = 12d10
data_offset = 353400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = d4e, mft_size = 12d10
data_offset = 353800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = d4f, mft_size = 12d10
data_offset = 353c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = d50, mft_size = 12d10
data_offset = 354000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = d51, mft_size = 12d10
data_offset = 354400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = d52, mft_size = 12d10
data_offset = 354800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = d53, mft_size = 12d10
data_offset = 354c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = d54, mft_size = 12d10
data_offset = 355000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = d55, mft_size = 12d10

12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 -

data_offset = 355400, data_size = 400, file_size


cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = d56, mft_size = 12d10
data_offset = 355800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = d57, mft_size = 12d10
data_offset = 355c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = d58, mft_size = 12d10
data_offset = 356000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = d59, mft_size = 12d10
data_offset = 356400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = d5a, mft_size = 12d10
data_offset = 356800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = d5b, mft_size = 12d10
data_offset = 356c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = d5c, mft_size = 12d10
data_offset = 357000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = d5d, mft_size = 12d10
data_offset = 357400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = d5e, mft_size = 12d10
data_offset = 357800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = d5f, mft_size = 12d10
data_offset = 357c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = d60, mft_size = 12d10
data_offset = 358000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = d61, mft_size = 12d10

12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 -

data_offset = 358400, data_size = 400, file_size


cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = d62, mft_size = 12d10
data_offset = 358800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = d63, mft_size = 12d10
data_offset = 358c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = d64, mft_size = 12d10
data_offset = 359000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = d65, mft_size = 12d10
data_offset = 359400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = d66, mft_size = 12d10
data_offset = 359800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = d67, mft_size = 12d10
data_offset = 359c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number d67
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = d68, mft_size = 12d10
data_offset = 35a000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = d69, mft_size = 12d10
data_offset = 35a400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = d6a, mft_size = 12d10
data_offset = 35a800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = d6b, mft_size = 12d10
data_offset = 35ac00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = d6c, mft_size = 12d10
data_offset = 35b000, data_size = 400, file_size

= 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000

cache = 1550020, cache_offset = 0, cache_size =


Reading MFT entry. number = d6d, mft_size = 12d10
data_offset = 35b400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = d6e, mft_size = 12d10
data_offset = 35b800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = d6f, mft_size = 12d10
data_offset = 35bc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = d70, mft_size = 12d10
data_offset = 35c000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = d71, mft_size = 12d10
data_offset = 35c400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = d72, mft_size = 12d10
data_offset = 35c800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = d73, mft_size = 12d10
data_offset = 35cc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = d74, mft_size = 12d10
data_offset = 35d000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = d75, mft_size = 12d10
data_offset = 35d400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = d76, mft_size = 12d10
data_offset = 35d800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number d76
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = d77, mft_size = 12d10
data_offset = 35dc00, data_size = 400, file_size

12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 -

cache = 1550020, cache_offset = 0, cache_size =


Reading MFT entry. number = d78, mft_size = 12d10
data_offset = 35e000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = d79, mft_size = 12d10
data_offset = 35e400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = d7a, mft_size = 12d10
data_offset = 35e800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = d7b, mft_size = 12d10
data_offset = 35ec00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = d7c, mft_size = 12d10
data_offset = 35f000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number d7c
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = d7d, mft_size = 12d10
data_offset = 35f400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = d7e, mft_size = 12d10
data_offset = 35f800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = d7f, mft_size = 12d10
data_offset = 35fc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number d7f
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = d80, mft_size = 12d10
data_offset = 360000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number d80
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = d81, mft_size = 12d10

12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 -

data_offset = 360400, data_size = 400, file_size


cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = d82, mft_size = 12d10
data_offset = 360800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = d83, mft_size = 12d10
data_offset = 360c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number d83
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = d84, mft_size = 12d10
data_offset = 361000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number d84
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = d85, mft_size = 12d10
data_offset = 361400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = d86, mft_size = 12d10
data_offset = 361800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = d87, mft_size = 12d10
data_offset = 361c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number d87
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = d88, mft_size = 12d10
data_offset = 362000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = d89, mft_size = 12d10
data_offset = 362400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = d8a, mft_size = 12d10
data_offset = 362800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =

400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000

CMFTEntry::GetFileName: $FILE_NAME attribute was not fou


CMFTEntry: MFT entry number d8a
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = d8b, mft_size = 12d10
data_offset = 362c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = d8c, mft_size = 12d10
data_offset = 363000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = d8d, mft_size = 12d10
data_offset = 363400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = d8e, mft_size = 12d10
data_offset = 363800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = d8f, mft_size = 12d10
data_offset = 363c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = d90, mft_size = 12d10
data_offset = 364000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = d91, mft_size = 12d10
data_offset = 364400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = d92, mft_size = 12d10
data_offset = 364800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = d93, mft_size = 12d10
data_offset = 364c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = d94, mft_size = 12d10
data_offset = 365000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = d95, mft_size = 12d10
data_offset = 365400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =

12:31:53 12:31:53 = 4b44000


12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000

Reading MFT entry. number = d96, mft_size = 12d10


data_offset = 365800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = d97, mft_size = 12d10
data_offset = 365c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = d98, mft_size = 12d10
data_offset = 366000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = d99, mft_size = 12d10
data_offset = 366400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = d9a, mft_size = 12d10
data_offset = 366800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = d9b, mft_size = 12d10
data_offset = 366c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = d9c, mft_size = 12d10
data_offset = 367000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = d9d, mft_size = 12d10
data_offset = 367400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = d9e, mft_size = 12d10
data_offset = 367800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = d9f, mft_size = 12d10
data_offset = 367c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = da0, mft_size = 12d10
data_offset = 368000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = da1, mft_size = 12d10
data_offset = 368400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =

12:31:53 12:31:53 = 4b44000


12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000

Reading MFT entry. number = da2, mft_size = 12d10


data_offset = 368800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = da3, mft_size = 12d10
data_offset = 368c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = da4, mft_size = 12d10
data_offset = 369000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = da5, mft_size = 12d10
data_offset = 369400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = da6, mft_size = 12d10
data_offset = 369800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = da7, mft_size = 12d10
data_offset = 369c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = da8, mft_size = 12d10
data_offset = 36a000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = da9, mft_size = 12d10
data_offset = 36a400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = daa, mft_size = 12d10
data_offset = 36a800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = dab, mft_size = 12d10
data_offset = 36ac00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = dac, mft_size = 12d10
data_offset = 36b000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = dad, mft_size = 12d10
data_offset = 36b400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =

12:31:53 12:31:53 = 4b44000


12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000

Reading MFT entry. number = dae, mft_size = 12d10


data_offset = 36b800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = daf, mft_size = 12d10
data_offset = 36bc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = db0, mft_size = 12d10
data_offset = 36c000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = db1, mft_size = 12d10
data_offset = 36c400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = db2, mft_size = 12d10
data_offset = 36c800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = db3, mft_size = 12d10
data_offset = 36cc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = db4, mft_size = 12d10
data_offset = 36d000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = db5, mft_size = 12d10
data_offset = 36d400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = db6, mft_size = 12d10
data_offset = 36d800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = db7, mft_size = 12d10
data_offset = 36dc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = db8, mft_size = 12d10
data_offset = 36e000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = db9, mft_size = 12d10
data_offset = 36e400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =

12:31:53 12:31:53 = 4b44000


12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 -

Reading MFT entry. number = dba, mft_size = 12d10


data_offset = 36e800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = dbb, mft_size = 12d10
data_offset = 36ec00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = dbc, mft_size = 12d10
data_offset = 36f000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = dbd, mft_size = 12d10
data_offset = 36f400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = dbe, mft_size = 12d10
data_offset = 36f800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = dbf, mft_size = 12d10
data_offset = 36fc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = dc0, mft_size = 12d10
data_offset = 370000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = dc1, mft_size = 12d10
data_offset = 370400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = dc2, mft_size = 12d10
data_offset = 370800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = dc3, mft_size = 12d10
data_offset = 370c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number dc3
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = dc4, mft_size = 12d10
data_offset = 371000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou

nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 -

CMFTEntry: MFT entry number dc4


CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = dc5, mft_size = 12d10
data_offset = 371400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = dc6, mft_size = 12d10
data_offset = 371800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = dc7, mft_size = 12d10
data_offset = 371c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = dc8, mft_size = 12d10
data_offset = 372000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = dc9, mft_size = 12d10
data_offset = 372400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = dca, mft_size = 12d10
data_offset = 372800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = dcb, mft_size = 12d10
data_offset = 372c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = dcc, mft_size = 12d10
data_offset = 373000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = dcd, mft_size = 12d10
data_offset = 373400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = dce, mft_size = 12d10
data_offset = 373800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = dcf, mft_size = 12d10
data_offset = 373c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = dd0, mft_size = 12d10
data_offset = 374000, data_size = 400, file_size

= 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 -

cache = 1550020, cache_offset = 0, cache_size =


Reading MFT entry. number = dd1, mft_size = 12d10
data_offset = 374400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = dd2, mft_size = 12d10
data_offset = 374800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number dd2
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = dd3, mft_size = 12d10
data_offset = 374c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number dd3
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = dd4, mft_size = 12d10
data_offset = 375000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = dd5, mft_size = 12d10
data_offset = 375400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = dd6, mft_size = 12d10
data_offset = 375800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number dd6
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = dd7, mft_size = 12d10
data_offset = 375c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number dd7
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = dd8, mft_size = 12d10
data_offset = 376000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = dd9, mft_size = 12d10

12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 -

data_offset = 376400, data_size = 400, file_size


cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = dda, mft_size = 12d10
data_offset = 376800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number dda
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = ddb, mft_size = 12d10
data_offset = 376c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = ddc, mft_size = 12d10
data_offset = 377000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = ddd, mft_size = 12d10
data_offset = 377400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number ddd
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = dde, mft_size = 12d10
data_offset = 377800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = ddf, mft_size = 12d10
data_offset = 377c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number ddf
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = de0, mft_size = 12d10
data_offset = 378000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = de1, mft_size = 12d10
data_offset = 378400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = de2, mft_size = 12d10
data_offset = 378800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =

400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 -

CMFTEntry::GetFileName: $FILE_NAME attribute was not fou


CMFTEntry: MFT entry number de2
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = de3, mft_size = 12d10
data_offset = 378c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number de3
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = de4, mft_size = 12d10
data_offset = 379000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = de5, mft_size = 12d10
data_offset = 379400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number de5
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = de6, mft_size = 12d10
data_offset = 379800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = de7, mft_size = 12d10
data_offset = 379c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number de7
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = de8, mft_size = 12d10
data_offset = 37a000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = de9, mft_size = 12d10
data_offset = 37a400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number de9
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = dea, mft_size = 12d10
data_offset = 37a800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =

400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd

CMFTEntry::GetFileName: $FILE_NAME attribute was not fou


CMFTEntry: MFT entry number dea
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = deb, mft_size = 12d10
data_offset = 37ac00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = dec, mft_size = 12d10
data_offset = 37b000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = ded, mft_size = 12d10
data_offset = 37b400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = dee, mft_size = 12d10
data_offset = 37b800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number dee
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = def, mft_size = 12d10
data_offset = 37bc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = df0, mft_size = 12d10
data_offset = 37c000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = df1, mft_size = 12d10
data_offset = 37c400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = df2, mft_size = 12d10
data_offset = 37c800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number df2
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = df3, mft_size = 12d10
data_offset = 37cc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou

12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000


12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 -

CMFTEntry: MFT entry number df3


CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = df4, mft_size = 12d10
data_offset = 37d000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = df5, mft_size = 12d10
data_offset = 37d400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number df5
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = df6, mft_size = 12d10
data_offset = 37d800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = df7, mft_size = 12d10
data_offset = 37dc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = df8, mft_size = 12d10
data_offset = 37e000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = df9, mft_size = 12d10
data_offset = 37e400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = dfa, mft_size = 12d10
data_offset = 37e800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number dfa
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = dfb, mft_size = 12d10
data_offset = 37ec00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = dfc, mft_size = 12d10
data_offset = 37f000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number dfc
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = dfd, mft_size = 12d10

12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 -

data_offset = 37f400, data_size = 400, file_size


cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = dfe, mft_size = 12d10
data_offset = 37f800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number dfe
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = dff, mft_size = 12d10
data_offset = 37fc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = e00, mft_size = 12d10
data_offset = 380000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = e01, mft_size = 12d10
data_offset = 380400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = e02, mft_size = 12d10
data_offset = 380800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = e03, mft_size = 12d10
data_offset = 380c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = e04, mft_size = 12d10
data_offset = 381000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = e05, mft_size = 12d10
data_offset = 381400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = e06, mft_size = 12d10
data_offset = 381800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = e07, mft_size = 12d10
data_offset = 381c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = e08, mft_size = 12d10
data_offset = 382000, data_size = 400, file_size

= 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 -

cache = 1550020, cache_offset = 0, cache_size =


Reading MFT entry. number = e09, mft_size = 12d10
data_offset = 382400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = e0a, mft_size = 12d10
data_offset = 382800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = e0b, mft_size = 12d10
data_offset = 382c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = e0c, mft_size = 12d10
data_offset = 383000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = e0d, mft_size = 12d10
data_offset = 383400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = e0e, mft_size = 12d10
data_offset = 383800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = e0f, mft_size = 12d10
data_offset = 383c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = e10, mft_size = 12d10
data_offset = 384000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = e11, mft_size = 12d10
data_offset = 384400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = e12, mft_size = 12d10
data_offset = 384800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = e13, mft_size = 12d10
data_offset = 384c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = e14, mft_size = 12d10
data_offset = 385000, data_size = 400, file_size

= 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 -

cache = 1550020, cache_offset = 0, cache_size =


Reading MFT entry. number = e15, mft_size = 12d10
data_offset = 385400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = e16, mft_size = 12d10
data_offset = 385800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = e17, mft_size = 12d10
data_offset = 385c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = e18, mft_size = 12d10
data_offset = 386000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = e19, mft_size = 12d10
data_offset = 386400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = e1a, mft_size = 12d10
data_offset = 386800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = e1b, mft_size = 12d10
data_offset = 386c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = e1c, mft_size = 12d10
data_offset = 387000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = e1d, mft_size = 12d10
data_offset = 387400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = e1e, mft_size = 12d10
data_offset = 387800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = e1f, mft_size = 12d10
data_offset = 387c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = e20, mft_size = 12d10
data_offset = 388000, data_size = 400, file_size

= 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 -

cache = 1550020, cache_offset = 0, cache_size =


Reading MFT entry. number = e21, mft_size = 12d10
data_offset = 388400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = e22, mft_size = 12d10
data_offset = 388800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = e23, mft_size = 12d10
data_offset = 388c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = e24, mft_size = 12d10
data_offset = 389000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = e25, mft_size = 12d10
data_offset = 389400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = e26, mft_size = 12d10
data_offset = 389800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = e27, mft_size = 12d10
data_offset = 389c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = e28, mft_size = 12d10
data_offset = 38a000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = e29, mft_size = 12d10
data_offset = 38a400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = e2a, mft_size = 12d10
data_offset = 38a800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = e2b, mft_size = 12d10
data_offset = 38ac00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = e2c, mft_size = 12d10
data_offset = 38b000, data_size = 400, file_size

= 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000

cache = 1550020, cache_offset = 0, cache_size =


Reading MFT entry. number = e2d, mft_size = 12d10
data_offset = 38b400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = e2e, mft_size = 12d10
data_offset = 38b800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = e2f, mft_size = 12d10
data_offset = 38bc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = e30, mft_size = 12d10
data_offset = 38c000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = e31, mft_size = 12d10
data_offset = 38c400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = e32, mft_size = 12d10
data_offset = 38c800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = e33, mft_size = 12d10
data_offset = 38cc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = e34, mft_size = 12d10
data_offset = 38d000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = e35, mft_size = 12d10
data_offset = 38d400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = e36, mft_size = 12d10
data_offset = 38d800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number e36
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = e37, mft_size = 12d10
data_offset = 38dc00, data_size = 400, file_size

12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 -

cache = 1550020, cache_offset = 0, cache_size =


CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number e37
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = e38, mft_size = 12d10
data_offset = 38e000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = e39, mft_size = 12d10
data_offset = 38e400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = e3a, mft_size = 12d10
data_offset = 38e800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = e3b, mft_size = 12d10
data_offset = 38ec00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = e3c, mft_size = 12d10
data_offset = 38f000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = e3d, mft_size = 12d10
data_offset = 38f400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = e3e, mft_size = 12d10
data_offset = 38f800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = e3f, mft_size = 12d10
data_offset = 38fc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = e40, mft_size = 12d10
data_offset = 390000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = e41, mft_size = 12d10
data_offset = 390400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = e42, mft_size = 12d10
data_offset = 390800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =

400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 -

Reading MFT entry. number = e43, mft_size = 12d10


data_offset = 390c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = e44, mft_size = 12d10
data_offset = 391000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = e45, mft_size = 12d10
data_offset = 391400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = e46, mft_size = 12d10
data_offset = 391800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = e47, mft_size = 12d10
data_offset = 391c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = e48, mft_size = 12d10
data_offset = 392000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = e49, mft_size = 12d10
data_offset = 392400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = e4a, mft_size = 12d10
data_offset = 392800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = e4b, mft_size = 12d10
data_offset = 392c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = e4c, mft_size = 12d10
data_offset = 393000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = e4d, mft_size = 12d10
data_offset = 393400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = e4e, mft_size = 12d10
data_offset = 393800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =

400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 -

Reading MFT entry. number = e4f, mft_size = 12d10


data_offset = 393c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = e50, mft_size = 12d10
data_offset = 394000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = e51, mft_size = 12d10
data_offset = 394400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = e52, mft_size = 12d10
data_offset = 394800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = e53, mft_size = 12d10
data_offset = 394c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = e54, mft_size = 12d10
data_offset = 395000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = e55, mft_size = 12d10
data_offset = 395400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number e55
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = e56, mft_size = 12d10
data_offset = 395800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number e56
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = e57, mft_size = 12d10
data_offset = 395c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = e58, mft_size = 12d10
data_offset = 396000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou

nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 -

CMFTEntry: MFT entry number e58


CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = e59, mft_size = 12d10
data_offset = 396400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number e59
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = e5a, mft_size = 12d10
data_offset = 396800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number e5a
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = e5b, mft_size = 12d10
data_offset = 396c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = e5c, mft_size = 12d10
data_offset = 397000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = e5d, mft_size = 12d10
data_offset = 397400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = e5e, mft_size = 12d10
data_offset = 397800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = e5f, mft_size = 12d10
data_offset = 397c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = e60, mft_size = 12d10
data_offset = 398000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = e61, mft_size = 12d10
data_offset = 398400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = e62, mft_size = 12d10
data_offset = 398800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =

400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 -

Reading MFT entry. number = e63, mft_size = 12d10


data_offset = 398c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = e64, mft_size = 12d10
data_offset = 399000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = e65, mft_size = 12d10
data_offset = 399400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = e66, mft_size = 12d10
data_offset = 399800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = e67, mft_size = 12d10
data_offset = 399c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = e68, mft_size = 12d10
data_offset = 39a000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = e69, mft_size = 12d10
data_offset = 39a400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = e6a, mft_size = 12d10
data_offset = 39a800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = e6b, mft_size = 12d10
data_offset = 39ac00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = e6c, mft_size = 12d10
data_offset = 39b000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = e6d, mft_size = 12d10
data_offset = 39b400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = e6e, mft_size = 12d10
data_offset = 39b800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =

400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 -

Reading MFT entry. number = e6f, mft_size = 12d10


data_offset = 39bc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = e70, mft_size = 12d10
data_offset = 39c000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = e71, mft_size = 12d10
data_offset = 39c400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = e72, mft_size = 12d10
data_offset = 39c800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = e73, mft_size = 12d10
data_offset = 39cc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = e74, mft_size = 12d10
data_offset = 39d000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = e75, mft_size = 12d10
data_offset = 39d400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = e76, mft_size = 12d10
data_offset = 39d800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = e77, mft_size = 12d10
data_offset = 39dc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = e78, mft_size = 12d10
data_offset = 39e000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = e79, mft_size = 12d10
data_offset = 39e400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = e7a, mft_size = 12d10
data_offset = 39e800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =

400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 -

Reading MFT entry. number = e7b, mft_size = 12d10


data_offset = 39ec00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = e7c, mft_size = 12d10
data_offset = 39f000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = e7d, mft_size = 12d10
data_offset = 39f400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = e7e, mft_size = 12d10
data_offset = 39f800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = e7f, mft_size = 12d10
data_offset = 39fc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = e80, mft_size = 12d10
data_offset = 3a0000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = e81, mft_size = 12d10
data_offset = 3a0400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = e82, mft_size = 12d10
data_offset = 3a0800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = e83, mft_size = 12d10
data_offset = 3a0c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = e84, mft_size = 12d10
data_offset = 3a1000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = e85, mft_size = 12d10
data_offset = 3a1400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = e86, mft_size = 12d10
data_offset = 3a1800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =

400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 -

Reading MFT entry. number = e87, mft_size = 12d10


data_offset = 3a1c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = e88, mft_size = 12d10
data_offset = 3a2000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = e89, mft_size = 12d10
data_offset = 3a2400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = e8a, mft_size = 12d10
data_offset = 3a2800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = e8b, mft_size = 12d10
data_offset = 3a2c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = e8c, mft_size = 12d10
data_offset = 3a3000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = e8d, mft_size = 12d10
data_offset = 3a3400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = e8e, mft_size = 12d10
data_offset = 3a3800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = e8f, mft_size = 12d10
data_offset = 3a3c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = e90, mft_size = 12d10
data_offset = 3a4000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = e91, mft_size = 12d10
data_offset = 3a4400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = e92, mft_size = 12d10
data_offset = 3a4800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =

400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 -

Reading MFT entry. number = e93, mft_size = 12d10


data_offset = 3a4c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = e94, mft_size = 12d10
data_offset = 3a5000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = e95, mft_size = 12d10
data_offset = 3a5400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = e96, mft_size = 12d10
data_offset = 3a5800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = e97, mft_size = 12d10
data_offset = 3a5c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = e98, mft_size = 12d10
data_offset = 3a6000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = e99, mft_size = 12d10
data_offset = 3a6400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = e9a, mft_size = 12d10
data_offset = 3a6800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = e9b, mft_size = 12d10
data_offset = 3a6c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = e9c, mft_size = 12d10
data_offset = 3a7000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = e9d, mft_size = 12d10
data_offset = 3a7400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = e9e, mft_size = 12d10
data_offset = 3a7800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =

400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000

Reading MFT entry. number = e9f, mft_size = 12d10


data_offset = 3a7c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = ea0, mft_size = 12d10
data_offset = 3a8000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = ea1, mft_size = 12d10
data_offset = 3a8400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = ea2, mft_size = 12d10
data_offset = 3a8800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = ea3, mft_size = 12d10
data_offset = 3a8c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = ea4, mft_size = 12d10
data_offset = 3a9000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = ea5, mft_size = 12d10
data_offset = 3a9400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = ea6, mft_size = 12d10
data_offset = 3a9800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = ea7, mft_size = 12d10
data_offset = 3a9c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = ea8, mft_size = 12d10
data_offset = 3aa000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number ea8
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = ea9, mft_size = 12d10
data_offset = 3aa400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =

12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 -

CMFTEntry::GetFileName: $FILE_NAME attribute was not fou


CMFTEntry: MFT entry number ea9
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = eaa, mft_size = 12d10
data_offset = 3aa800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number eaa
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = eab, mft_size = 12d10
data_offset = 3aac00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = eac, mft_size = 12d10
data_offset = 3ab000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = ead, mft_size = 12d10
data_offset = 3ab400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = eae, mft_size = 12d10
data_offset = 3ab800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = eaf, mft_size = 12d10
data_offset = 3abc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = eb0, mft_size = 12d10
data_offset = 3ac000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = eb1, mft_size = 12d10
data_offset = 3ac400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = eb2, mft_size = 12d10
data_offset = 3ac800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = eb3, mft_size = 12d10
data_offset = 3acc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = eb4, mft_size = 12d10
data_offset = 3ad000, data_size = 400, file_size

= 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 -

cache = 1550020, cache_offset = 0, cache_size =


Reading MFT entry. number = eb5, mft_size = 12d10
data_offset = 3ad400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = eb6, mft_size = 12d10
data_offset = 3ad800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = eb7, mft_size = 12d10
data_offset = 3adc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = eb8, mft_size = 12d10
data_offset = 3ae000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = eb9, mft_size = 12d10
data_offset = 3ae400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = eba, mft_size = 12d10
data_offset = 3ae800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = ebb, mft_size = 12d10
data_offset = 3aec00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = ebc, mft_size = 12d10
data_offset = 3af000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = ebd, mft_size = 12d10
data_offset = 3af400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = ebe, mft_size = 12d10
data_offset = 3af800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = ebf, mft_size = 12d10
data_offset = 3afc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = ec0, mft_size = 12d10
data_offset = 3b0000, data_size = 400, file_size

= 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 -

cache = 1550020, cache_offset = 0, cache_size =


Reading MFT entry. number = ec1, mft_size = 12d10
data_offset = 3b0400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = ec2, mft_size = 12d10
data_offset = 3b0800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = ec3, mft_size = 12d10
data_offset = 3b0c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = ec4, mft_size = 12d10
data_offset = 3b1000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = ec5, mft_size = 12d10
data_offset = 3b1400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = ec6, mft_size = 12d10
data_offset = 3b1800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = ec7, mft_size = 12d10
data_offset = 3b1c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = ec8, mft_size = 12d10
data_offset = 3b2000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = ec9, mft_size = 12d10
data_offset = 3b2400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = eca, mft_size = 12d10
data_offset = 3b2800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = ecb, mft_size = 12d10
data_offset = 3b2c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = ecc, mft_size = 12d10
data_offset = 3b3000, data_size = 400, file_size

= 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 -

cache = 1550020, cache_offset = 0, cache_size =


Reading MFT entry. number = ecd, mft_size = 12d10
data_offset = 3b3400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = ece, mft_size = 12d10
data_offset = 3b3800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = ecf, mft_size = 12d10
data_offset = 3b3c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = ed0, mft_size = 12d10
data_offset = 3b4000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = ed1, mft_size = 12d10
data_offset = 3b4400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = ed2, mft_size = 12d10
data_offset = 3b4800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = ed3, mft_size = 12d10
data_offset = 3b4c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = ed4, mft_size = 12d10
data_offset = 3b5000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = ed5, mft_size = 12d10
data_offset = 3b5400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = ed6, mft_size = 12d10
data_offset = 3b5800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = ed7, mft_size = 12d10
data_offset = 3b5c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = ed8, mft_size = 12d10
data_offset = 3b6000, data_size = 400, file_size

= 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 -

cache = 1550020, cache_offset = 0, cache_size =


Reading MFT entry. number = ed9, mft_size = 12d10
data_offset = 3b6400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = eda, mft_size = 12d10
data_offset = 3b6800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = edb, mft_size = 12d10
data_offset = 3b6c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = edc, mft_size = 12d10
data_offset = 3b7000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = edd, mft_size = 12d10
data_offset = 3b7400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = ede, mft_size = 12d10
data_offset = 3b7800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = edf, mft_size = 12d10
data_offset = 3b7c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = ee0, mft_size = 12d10
data_offset = 3b8000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = ee1, mft_size = 12d10
data_offset = 3b8400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = ee2, mft_size = 12d10
data_offset = 3b8800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = ee3, mft_size = 12d10
data_offset = 3b8c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = ee4, mft_size = 12d10
data_offset = 3b9000, data_size = 400, file_size

= 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000

cache = 1550020, cache_offset = 0, cache_size =


Reading MFT entry. number = ee5, mft_size = 12d10
data_offset = 3b9400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = ee6, mft_size = 12d10
data_offset = 3b9800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = ee7, mft_size = 12d10
data_offset = 3b9c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = ee8, mft_size = 12d10
data_offset = 3ba000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = ee9, mft_size = 12d10
data_offset = 3ba400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number ee9
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = eea, mft_size = 12d10
data_offset = 3ba800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = eeb, mft_size = 12d10
data_offset = 3bac00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = eec, mft_size = 12d10
data_offset = 3bb000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = eed, mft_size = 12d10
data_offset = 3bb400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = eee, mft_size = 12d10
data_offset = 3bb800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = eef, mft_size = 12d10
data_offset = 3bbc00, data_size = 400, file_size

12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000

cache = 1550020, cache_offset = 0, cache_size =


Reading MFT entry. number = ef0, mft_size = 12d10
data_offset = 3bc000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = ef1, mft_size = 12d10
data_offset = 3bc400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = ef2, mft_size = 12d10
data_offset = 3bc800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = ef3, mft_size = 12d10
data_offset = 3bcc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = ef4, mft_size = 12d10
data_offset = 3bd000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = ef5, mft_size = 12d10
data_offset = 3bd400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = ef6, mft_size = 12d10
data_offset = 3bd800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = ef7, mft_size = 12d10
data_offset = 3bdc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = ef8, mft_size = 12d10
data_offset = 3be000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = ef9, mft_size = 12d10
data_offset = 3be400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = efa, mft_size = 12d10
data_offset = 3be800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = efb, mft_size = 12d10
data_offset = 3bec00, data_size = 400, file_size

12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000

cache = 1550020, cache_offset = 0, cache_size =


Reading MFT entry. number = efc, mft_size = 12d10
data_offset = 3bf000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = efd, mft_size = 12d10
data_offset = 3bf400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = efe, mft_size = 12d10
data_offset = 3bf800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = eff, mft_size = 12d10
data_offset = 3bfc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = f00, mft_size = 12d10
data_offset = 3c0000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = f01, mft_size = 12d10
data_offset = 3c0400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = f02, mft_size = 12d10
data_offset = 3c0800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = f03, mft_size = 12d10
data_offset = 3c0c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = f04, mft_size = 12d10
data_offset = 3c1000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = f05, mft_size = 12d10
data_offset = 3c1400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = f06, mft_size = 12d10
data_offset = 3c1800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = f07, mft_size = 12d10
data_offset = 3c1c00, data_size = 400, file_size

12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 -

cache = 1550020, cache_offset = 0, cache_size =


Reading MFT entry. number = f08, mft_size = 12d10
data_offset = 3c2000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = f09, mft_size = 12d10
data_offset = 3c2400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = f0a, mft_size = 12d10
data_offset = 3c2800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = f0b, mft_size = 12d10
data_offset = 3c2c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = f0c, mft_size = 12d10
data_offset = 3c3000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = f0d, mft_size = 12d10
data_offset = 3c3400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = f0e, mft_size = 12d10
data_offset = 3c3800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = f0f, mft_size = 12d10
data_offset = 3c3c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = f10, mft_size = 12d10
data_offset = 3c4000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number f10
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = f11, mft_size = 12d10
data_offset = 3c4400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = f12, mft_size = 12d10
data_offset = 3c4800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =

400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 -

Reading MFT entry. number = f13, mft_size = 12d10


data_offset = 3c4c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = f14, mft_size = 12d10
data_offset = 3c5000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = f15, mft_size = 12d10
data_offset = 3c5400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = f16, mft_size = 12d10
data_offset = 3c5800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = f17, mft_size = 12d10
data_offset = 3c5c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = f18, mft_size = 12d10
data_offset = 3c6000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = f19, mft_size = 12d10
data_offset = 3c6400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = f1a, mft_size = 12d10
data_offset = 3c6800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = f1b, mft_size = 12d10
data_offset = 3c6c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = f1c, mft_size = 12d10
data_offset = 3c7000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = f1d, mft_size = 12d10
data_offset = 3c7400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = f1e, mft_size = 12d10
data_offset = 3c7800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =

400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 -

Reading MFT entry. number = f1f, mft_size = 12d10


data_offset = 3c7c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = f20, mft_size = 12d10
data_offset = 3c8000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = f21, mft_size = 12d10
data_offset = 3c8400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = f22, mft_size = 12d10
data_offset = 3c8800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = f23, mft_size = 12d10
data_offset = 3c8c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = f24, mft_size = 12d10
data_offset = 3c9000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = f25, mft_size = 12d10
data_offset = 3c9400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = f26, mft_size = 12d10
data_offset = 3c9800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = f27, mft_size = 12d10
data_offset = 3c9c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = f28, mft_size = 12d10
data_offset = 3ca000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = f29, mft_size = 12d10
data_offset = 3ca400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = f2a, mft_size = 12d10
data_offset = 3ca800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =

400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 -

Reading MFT entry. number = f2b, mft_size = 12d10


data_offset = 3cac00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number f2b
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = f2c, mft_size = 12d10
data_offset = 3cb000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = f2d, mft_size = 12d10
data_offset = 3cb400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = f2e, mft_size = 12d10
data_offset = 3cb800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = f2f, mft_size = 12d10
data_offset = 3cbc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = f30, mft_size = 12d10
data_offset = 3cc000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = f31, mft_size = 12d10
data_offset = 3cc400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = f32, mft_size = 12d10
data_offset = 3cc800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = f33, mft_size = 12d10
data_offset = 3ccc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number f33
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = f34, mft_size = 12d10
data_offset = 3cd000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou

nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 -

CMFTEntry: MFT entry number f34


CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = f35, mft_size = 12d10
data_offset = 3cd400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = f36, mft_size = 12d10
data_offset = 3cd800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = f37, mft_size = 12d10
data_offset = 3cdc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = f38, mft_size = 12d10
data_offset = 3ce000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = f39, mft_size = 12d10
data_offset = 3ce400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = f3a, mft_size = 12d10
data_offset = 3ce800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = f3b, mft_size = 12d10
data_offset = 3cec00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = f3c, mft_size = 12d10
data_offset = 3cf000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = f3d, mft_size = 12d10
data_offset = 3cf400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = f3e, mft_size = 12d10
data_offset = 3cf800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = f3f, mft_size = 12d10
data_offset = 3cfc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = f40, mft_size = 12d10
data_offset = 3d0000, data_size = 400, file_size

= 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 -

cache = 1550020, cache_offset = 0, cache_size =


Reading MFT entry. number = f41, mft_size = 12d10
data_offset = 3d0400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = f42, mft_size = 12d10
data_offset = 3d0800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = f43, mft_size = 12d10
data_offset = 3d0c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = f44, mft_size = 12d10
data_offset = 3d1000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = f45, mft_size = 12d10
data_offset = 3d1400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = f46, mft_size = 12d10
data_offset = 3d1800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = f47, mft_size = 12d10
data_offset = 3d1c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = f48, mft_size = 12d10
data_offset = 3d2000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = f49, mft_size = 12d10
data_offset = 3d2400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = f4a, mft_size = 12d10
data_offset = 3d2800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = f4b, mft_size = 12d10
data_offset = 3d2c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = f4c, mft_size = 12d10
data_offset = 3d3000, data_size = 400, file_size

= 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 -

cache = 1550020, cache_offset = 0, cache_size =


Reading MFT entry. number = f4d, mft_size = 12d10
data_offset = 3d3400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = f4e, mft_size = 12d10
data_offset = 3d3800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = f4f, mft_size = 12d10
data_offset = 3d3c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = f50, mft_size = 12d10
data_offset = 3d4000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = f51, mft_size = 12d10
data_offset = 3d4400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = f52, mft_size = 12d10
data_offset = 3d4800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = f53, mft_size = 12d10
data_offset = 3d4c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = f54, mft_size = 12d10
data_offset = 3d5000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = f55, mft_size = 12d10
data_offset = 3d5400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = f56, mft_size = 12d10
data_offset = 3d5800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = f57, mft_size = 12d10
data_offset = 3d5c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = f58, mft_size = 12d10
data_offset = 3d6000, data_size = 400, file_size

= 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 -

cache = 1550020, cache_offset = 0, cache_size =


Reading MFT entry. number = f59, mft_size = 12d10
data_offset = 3d6400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = f5a, mft_size = 12d10
data_offset = 3d6800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = f5b, mft_size = 12d10
data_offset = 3d6c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = f5c, mft_size = 12d10
data_offset = 3d7000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = f5d, mft_size = 12d10
data_offset = 3d7400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = f5e, mft_size = 12d10
data_offset = 3d7800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = f5f, mft_size = 12d10
data_offset = 3d7c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = f60, mft_size = 12d10
data_offset = 3d8000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = f61, mft_size = 12d10
data_offset = 3d8400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = f62, mft_size = 12d10
data_offset = 3d8800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = f63, mft_size = 12d10
data_offset = 3d8c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = f64, mft_size = 12d10
data_offset = 3d9000, data_size = 400, file_size

= 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 -

cache = 1550020, cache_offset = 0, cache_size =


Reading MFT entry. number = f65, mft_size = 12d10
data_offset = 3d9400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = f66, mft_size = 12d10
data_offset = 3d9800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = f67, mft_size = 12d10
data_offset = 3d9c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = f68, mft_size = 12d10
data_offset = 3da000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = f69, mft_size = 12d10
data_offset = 3da400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = f6a, mft_size = 12d10
data_offset = 3da800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = f6b, mft_size = 12d10
data_offset = 3dac00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = f6c, mft_size = 12d10
data_offset = 3db000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = f6d, mft_size = 12d10
data_offset = 3db400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = f6e, mft_size = 12d10
data_offset = 3db800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = f6f, mft_size = 12d10
data_offset = 3dbc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = f70, mft_size = 12d10
data_offset = 3dc000, data_size = 400, file_size

= 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 -

cache = 1550020, cache_offset = 0, cache_size =


Reading MFT entry. number = f71, mft_size = 12d10
data_offset = 3dc400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = f72, mft_size = 12d10
data_offset = 3dc800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = f73, mft_size = 12d10
data_offset = 3dcc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = f74, mft_size = 12d10
data_offset = 3dd000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = f75, mft_size = 12d10
data_offset = 3dd400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = f76, mft_size = 12d10
data_offset = 3dd800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = f77, mft_size = 12d10
data_offset = 3ddc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = f78, mft_size = 12d10
data_offset = 3de000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = f79, mft_size = 12d10
data_offset = 3de400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = f7a, mft_size = 12d10
data_offset = 3de800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = f7b, mft_size = 12d10
data_offset = 3dec00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = f7c, mft_size = 12d10
data_offset = 3df000, data_size = 400, file_size

= 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 nd
12:31:53 12:31:53 12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000

cache = 1550020, cache_offset = 0, cache_size =


Reading MFT entry. number = f7d, mft_size = 12d10
data_offset = 3df400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number f7d
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = f7e, mft_size = 12d10
data_offset = 3df800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = f7f, mft_size = 12d10
data_offset = 3dfc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = f80, mft_size = 12d10
data_offset = 3e0000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = f81, mft_size = 12d10
data_offset = 3e0400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = f82, mft_size = 12d10
data_offset = 3e0800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = f83, mft_size = 12d10
data_offset = 3e0c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = f84, mft_size = 12d10
data_offset = 3e1000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = f85, mft_size = 12d10
data_offset = 3e1400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = f86, mft_size = 12d10
data_offset = 3e1800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = f87, mft_size = 12d10
data_offset = 3e1c00, data_size = 400, file_size

12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000

cache = 1550020, cache_offset = 0, cache_size =


Reading MFT entry. number = f88, mft_size = 12d10
data_offset = 3e2000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = f89, mft_size = 12d10
data_offset = 3e2400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = f8a, mft_size = 12d10
data_offset = 3e2800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = f8b, mft_size = 12d10
data_offset = 3e2c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = f8c, mft_size = 12d10
data_offset = 3e3000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = f8d, mft_size = 12d10
data_offset = 3e3400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = f8e, mft_size = 12d10
data_offset = 3e3800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = f8f, mft_size = 12d10
data_offset = 3e3c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = f90, mft_size = 12d10
data_offset = 3e4000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = f91, mft_size = 12d10
data_offset = 3e4400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = f92, mft_size = 12d10
data_offset = 3e4800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = f93, mft_size = 12d10
data_offset = 3e4c00, data_size = 400, file_size

12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000

cache = 1550020, cache_offset = 0, cache_size =


Reading MFT entry. number = f94, mft_size = 12d10
data_offset = 3e5000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = f95, mft_size = 12d10
data_offset = 3e5400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = f96, mft_size = 12d10
data_offset = 3e5800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = f97, mft_size = 12d10
data_offset = 3e5c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = f98, mft_size = 12d10
data_offset = 3e6000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = f99, mft_size = 12d10
data_offset = 3e6400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = f9a, mft_size = 12d10
data_offset = 3e6800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = f9b, mft_size = 12d10
data_offset = 3e6c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = f9c, mft_size = 12d10
data_offset = 3e7000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = f9d, mft_size = 12d10
data_offset = 3e7400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = f9e, mft_size = 12d10
data_offset = 3e7800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = f9f, mft_size = 12d10
data_offset = 3e7c00, data_size = 400, file_size

12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000

cache = 1550020, cache_offset = 0, cache_size =


Reading MFT entry. number = fa0, mft_size = 12d10
data_offset = 3e8000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = fa1, mft_size = 12d10
data_offset = 3e8400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = fa2, mft_size = 12d10
data_offset = 3e8800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = fa3, mft_size = 12d10
data_offset = 3e8c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = fa4, mft_size = 12d10
data_offset = 3e9000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = fa5, mft_size = 12d10
data_offset = 3e9400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = fa6, mft_size = 12d10
data_offset = 3e9800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = fa7, mft_size = 12d10
data_offset = 3e9c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = fa8, mft_size = 12d10
data_offset = 3ea000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = fa9, mft_size = 12d10
data_offset = 3ea400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = faa, mft_size = 12d10
data_offset = 3ea800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = fab, mft_size = 12d10
data_offset = 3eac00, data_size = 400, file_size

12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000

cache = 1550020, cache_offset = 0, cache_size =


Reading MFT entry. number = fac, mft_size = 12d10
data_offset = 3eb000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = fad, mft_size = 12d10
data_offset = 3eb400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = fae, mft_size = 12d10
data_offset = 3eb800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = faf, mft_size = 12d10
data_offset = 3ebc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = fb0, mft_size = 12d10
data_offset = 3ec000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = fb1, mft_size = 12d10
data_offset = 3ec400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = fb2, mft_size = 12d10
data_offset = 3ec800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = fb3, mft_size = 12d10
data_offset = 3ecc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = fb4, mft_size = 12d10
data_offset = 3ed000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = fb5, mft_size = 12d10
data_offset = 3ed400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = fb6, mft_size = 12d10
data_offset = 3ed800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = fb7, mft_size = 12d10
data_offset = 3edc00, data_size = 400, file_size

12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000

cache = 1550020, cache_offset = 0, cache_size =


Reading MFT entry. number = fb8, mft_size = 12d10
data_offset = 3ee000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = fb9, mft_size = 12d10
data_offset = 3ee400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = fba, mft_size = 12d10
data_offset = 3ee800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = fbb, mft_size = 12d10
data_offset = 3eec00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = fbc, mft_size = 12d10
data_offset = 3ef000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = fbd, mft_size = 12d10
data_offset = 3ef400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = fbe, mft_size = 12d10
data_offset = 3ef800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = fbf, mft_size = 12d10
data_offset = 3efc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = fc0, mft_size = 12d10
data_offset = 3f0000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = fc1, mft_size = 12d10
data_offset = 3f0400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = fc2, mft_size = 12d10
data_offset = 3f0800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = fc3, mft_size = 12d10
data_offset = 3f0c00, data_size = 400, file_size

12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000

cache = 1550020, cache_offset = 0, cache_size =


Reading MFT entry. number = fc4, mft_size = 12d10
data_offset = 3f1000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = fc5, mft_size = 12d10
data_offset = 3f1400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = fc6, mft_size = 12d10
data_offset = 3f1800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = fc7, mft_size = 12d10
data_offset = 3f1c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = fc8, mft_size = 12d10
data_offset = 3f2000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = fc9, mft_size = 12d10
data_offset = 3f2400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = fca, mft_size = 12d10
data_offset = 3f2800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = fcb, mft_size = 12d10
data_offset = 3f2c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = fcc, mft_size = 12d10
data_offset = 3f3000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = fcd, mft_size = 12d10
data_offset = 3f3400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = fce, mft_size = 12d10
data_offset = 3f3800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = fcf, mft_size = 12d10
data_offset = 3f3c00, data_size = 400, file_size

12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000

cache = 1550020, cache_offset = 0, cache_size =


Reading MFT entry. number = fd0, mft_size = 12d10
data_offset = 3f4000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = fd1, mft_size = 12d10
data_offset = 3f4400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = fd2, mft_size = 12d10
data_offset = 3f4800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = fd3, mft_size = 12d10
data_offset = 3f4c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = fd4, mft_size = 12d10
data_offset = 3f5000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = fd5, mft_size = 12d10
data_offset = 3f5400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = fd6, mft_size = 12d10
data_offset = 3f5800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = fd7, mft_size = 12d10
data_offset = 3f5c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = fd8, mft_size = 12d10
data_offset = 3f6000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = fd9, mft_size = 12d10
data_offset = 3f6400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = fda, mft_size = 12d10
data_offset = 3f6800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = fdb, mft_size = 12d10
data_offset = 3f6c00, data_size = 400, file_size

12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000

cache = 1550020, cache_offset = 0, cache_size =


Reading MFT entry. number = fdc, mft_size = 12d10
data_offset = 3f7000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = fdd, mft_size = 12d10
data_offset = 3f7400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = fde, mft_size = 12d10
data_offset = 3f7800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = fdf, mft_size = 12d10
data_offset = 3f7c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = fe0, mft_size = 12d10
data_offset = 3f8000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = fe1, mft_size = 12d10
data_offset = 3f8400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = fe2, mft_size = 12d10
data_offset = 3f8800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = fe3, mft_size = 12d10
data_offset = 3f8c00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = fe4, mft_size = 12d10
data_offset = 3f9000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = fe5, mft_size = 12d10
data_offset = 3f9400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = fe6, mft_size = 12d10
data_offset = 3f9800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = fe7, mft_size = 12d10
data_offset = 3f9c00, data_size = 400, file_size

12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000

cache = 1550020, cache_offset = 0, cache_size =


Reading MFT entry. number = fe8, mft_size = 12d10
data_offset = 3fa000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = fe9, mft_size = 12d10
data_offset = 3fa400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = fea, mft_size = 12d10
data_offset = 3fa800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = feb, mft_size = 12d10
data_offset = 3fac00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = fec, mft_size = 12d10
data_offset = 3fb000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = fed, mft_size = 12d10
data_offset = 3fb400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = fee, mft_size = 12d10
data_offset = 3fb800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = fef, mft_size = 12d10
data_offset = 3fbc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = ff0, mft_size = 12d10
data_offset = 3fc000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = ff1, mft_size = 12d10
data_offset = 3fc400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = ff2, mft_size = 12d10
data_offset = 3fc800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = ff3, mft_size = 12d10
data_offset = 3fcc00, data_size = 400, file_size

12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000
12:31:53 400000
12:31:53 12:31:53 = 4b44000

cache = 1550020, cache_offset = 0, cache_size =


Reading MFT entry. number = ff4, mft_size = 12d10
data_offset = 3fd000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = ff5, mft_size = 12d10
data_offset = 3fd400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = ff6, mft_size = 12d10
data_offset = 3fd800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = ff7, mft_size = 12d10
data_offset = 3fdc00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = ff8, mft_size = 12d10
data_offset = 3fe000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = ff9, mft_size = 12d10
data_offset = 3fe400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = ffa, mft_size = 12d10
data_offset = 3fe800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = ffb, mft_size = 12d10
data_offset = 3fec00, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = ffc, mft_size = 12d10
data_offset = 3ff000, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = ffd, mft_size = 12d10
data_offset = 3ff400, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = ffe, mft_size = 12d10
data_offset = 3ff800, data_size = 400, file_size
cache = 1550020, cache_offset = 0, cache_size =
Reading MFT entry. number = fff, mft_size = 12d10
data_offset = 3ffc00, data_size = 400, file_size

12:31:53 cache = 1550020, cache_offset = 0, cache_size =


400000
12:31:53 data_runs = c58f60, data_runs_qnt = 4
12:31:53 run_cl_qnt = 3dec, clusters_to_read = 1, bytes_i
n_cluster = 1000, start_cl = c03ff, file_offs = 3ff000, d_offs = 3ff
12:31:53 Reading MFT entry. number = 1000, mft_size = 12d10
12:31:53 data_offset = 400000, data_size = 400, file_size
= 4b44000
12:31:53 cache = 1550020, cache_offset = 3ff000, cache_si
ze = 400000
12:31:53 Reading MFT entry. number = 1001, mft_size = 12d10
12:31:53 data_offset = 400400, data_size = 400, file_size
= 4b44000
12:31:53 cache = 1550020, cache_offset = 3ff000, cache_si
ze = 400000
12:31:53 Reading MFT entry. number = 1002, mft_size = 12d10
12:31:53 data_offset = 400800, data_size = 400, file_size
= 4b44000
12:31:53 cache = 1550020, cache_offset = 3ff000, cache_si
ze = 400000
12:31:53 Reading MFT entry. number = 1003, mft_size = 12d10
12:31:53 data_offset = 400c00, data_size = 400, file_size
= 4b44000
12:31:53 cache = 1550020, cache_offset = 3ff000, cache_si
ze = 400000
12:31:53 Reading MFT entry. number = 1004, mft_size = 12d10
12:31:53 data_offset = 401000, data_size = 400, file_size
= 4b44000
12:31:53 cache = 1550020, cache_offset = 3ff000, cache_si
ze = 400000
12:31:53 Reading MFT entry. number = 1005, mft_size = 12d10
12:31:53 data_offset = 401400, data_size = 400, file_size
= 4b44000
12:31:53 cache = 1550020, cache_offset = 3ff000, cache_si
ze = 400000
12:31:53 Reading MFT entry. number = 1006, mft_size = 12d10
12:31:53 data_offset = 401800, data_size = 400, file_size
= 4b44000
12:31:53 cache = 1550020, cache_offset = 3ff000, cache_si
ze = 400000
12:31:53 Reading MFT entry. number = 1007, mft_size = 12d10
12:31:53 data_offset = 401c00, data_size = 400, file_size
= 4b44000
12:31:53 cache = 1550020, cache_offset = 3ff000, cache_si
ze = 400000
12:31:53 Reading MFT entry. number = 1008, mft_size = 12d10
12:31:53 data_offset = 402000, data_size = 400, file_size
= 4b44000
12:31:53 cache = 1550020, cache_offset = 3ff000, cache_si
ze = 400000
12:31:53 Reading MFT entry. number = 1009, mft_size = 12d10
12:31:53 data_offset = 402400, data_size = 400, file_size
= 4b44000
12:31:53 cache = 1550020, cache_offset = 3ff000, cache_si
ze = 400000
12:31:53 Reading MFT entry. number = 100a, mft_size = 12d10
12:31:53 data_offset = 402800, data_size = 400, file_size
= 4b44000
12:31:53 cache = 1550020, cache_offset = 3ff000, cache_si
ze = 400000

12:31:53 12:31:53 = 4b44000


12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000

Reading MFT entry. number = 100b, mft_size = 12d10


data_offset = 402c00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 100c, mft_size = 12d10
data_offset = 403000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 100d, mft_size = 12d10
data_offset = 403400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 100e, mft_size = 12d10
data_offset = 403800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 100f, mft_size = 12d10
data_offset = 403c00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1010, mft_size = 12d10
data_offset = 404000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1011, mft_size = 12d10
data_offset = 404400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1012, mft_size = 12d10
data_offset = 404800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1013, mft_size = 12d10
data_offset = 404c00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1014, mft_size = 12d10
data_offset = 405000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1015, mft_size = 12d10
data_offset = 405400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1016, mft_size = 12d10
data_offset = 405800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si

12:31:53 12:31:53 = 4b44000


12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000

Reading MFT entry. number = 1017, mft_size = 12d10


data_offset = 405c00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1018, mft_size = 12d10
data_offset = 406000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1019, mft_size = 12d10
data_offset = 406400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 101a, mft_size = 12d10
data_offset = 406800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 101b, mft_size = 12d10
data_offset = 406c00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 101c, mft_size = 12d10
data_offset = 407000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 101d, mft_size = 12d10
data_offset = 407400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 101e, mft_size = 12d10
data_offset = 407800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 101f, mft_size = 12d10
data_offset = 407c00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1020, mft_size = 12d10
data_offset = 408000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1021, mft_size = 12d10
data_offset = 408400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1022, mft_size = 12d10
data_offset = 408800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si

12:31:53 12:31:53 = 4b44000


12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000

Reading MFT entry. number = 1023, mft_size = 12d10


data_offset = 408c00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1024, mft_size = 12d10
data_offset = 409000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1025, mft_size = 12d10
data_offset = 409400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1026, mft_size = 12d10
data_offset = 409800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1027, mft_size = 12d10
data_offset = 409c00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1028, mft_size = 12d10
data_offset = 40a000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1029, mft_size = 12d10
data_offset = 40a400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 102a, mft_size = 12d10
data_offset = 40a800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 102b, mft_size = 12d10
data_offset = 40ac00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 102c, mft_size = 12d10
data_offset = 40b000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 102d, mft_size = 12d10
data_offset = 40b400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 102e, mft_size = 12d10
data_offset = 40b800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si

12:31:53 12:31:53 = 4b44000


12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000

Reading MFT entry. number = 102f, mft_size = 12d10


data_offset = 40bc00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1030, mft_size = 12d10
data_offset = 40c000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1031, mft_size = 12d10
data_offset = 40c400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1032, mft_size = 12d10
data_offset = 40c800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1033, mft_size = 12d10
data_offset = 40cc00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1034, mft_size = 12d10
data_offset = 40d000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1035, mft_size = 12d10
data_offset = 40d400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1036, mft_size = 12d10
data_offset = 40d800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1037, mft_size = 12d10
data_offset = 40dc00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1038, mft_size = 12d10
data_offset = 40e000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1039, mft_size = 12d10
data_offset = 40e400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 103a, mft_size = 12d10
data_offset = 40e800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si

12:31:53 12:31:53 = 4b44000


12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000

Reading MFT entry. number = 103b, mft_size = 12d10


data_offset = 40ec00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 103c, mft_size = 12d10
data_offset = 40f000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 103d, mft_size = 12d10
data_offset = 40f400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 103e, mft_size = 12d10
data_offset = 40f800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 103f, mft_size = 12d10
data_offset = 40fc00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1040, mft_size = 12d10
data_offset = 410000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1041, mft_size = 12d10
data_offset = 410400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1042, mft_size = 12d10
data_offset = 410800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1043, mft_size = 12d10
data_offset = 410c00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1044, mft_size = 12d10
data_offset = 411000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1045, mft_size = 12d10
data_offset = 411400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1046, mft_size = 12d10
data_offset = 411800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si

12:31:53 12:31:53 = 4b44000


12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000

Reading MFT entry. number = 1047, mft_size = 12d10


data_offset = 411c00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1048, mft_size = 12d10
data_offset = 412000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1049, mft_size = 12d10
data_offset = 412400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 104a, mft_size = 12d10
data_offset = 412800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 104b, mft_size = 12d10
data_offset = 412c00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 104c, mft_size = 12d10
data_offset = 413000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 104d, mft_size = 12d10
data_offset = 413400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 104e, mft_size = 12d10
data_offset = 413800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 104f, mft_size = 12d10
data_offset = 413c00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1050, mft_size = 12d10
data_offset = 414000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1051, mft_size = 12d10
data_offset = 414400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1052, mft_size = 12d10
data_offset = 414800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si

12:31:53 12:31:53 = 4b44000


12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000

Reading MFT entry. number = 1053, mft_size = 12d10


data_offset = 414c00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1054, mft_size = 12d10
data_offset = 415000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1055, mft_size = 12d10
data_offset = 415400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1056, mft_size = 12d10
data_offset = 415800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1057, mft_size = 12d10
data_offset = 415c00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1058, mft_size = 12d10
data_offset = 416000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1059, mft_size = 12d10
data_offset = 416400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 105a, mft_size = 12d10
data_offset = 416800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 105b, mft_size = 12d10
data_offset = 416c00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 105c, mft_size = 12d10
data_offset = 417000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 105d, mft_size = 12d10
data_offset = 417400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 105e, mft_size = 12d10
data_offset = 417800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si

12:31:53 12:31:53 = 4b44000


12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000

Reading MFT entry. number = 105f, mft_size = 12d10


data_offset = 417c00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1060, mft_size = 12d10
data_offset = 418000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1061, mft_size = 12d10
data_offset = 418400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1062, mft_size = 12d10
data_offset = 418800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1063, mft_size = 12d10
data_offset = 418c00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1064, mft_size = 12d10
data_offset = 419000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1065, mft_size = 12d10
data_offset = 419400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1066, mft_size = 12d10
data_offset = 419800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1067, mft_size = 12d10
data_offset = 419c00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1068, mft_size = 12d10
data_offset = 41a000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1069, mft_size = 12d10
data_offset = 41a400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 106a, mft_size = 12d10
data_offset = 41a800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si

12:31:53 12:31:53 = 4b44000


12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000

Reading MFT entry. number = 106b, mft_size = 12d10


data_offset = 41ac00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 106c, mft_size = 12d10
data_offset = 41b000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 106d, mft_size = 12d10
data_offset = 41b400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 106e, mft_size = 12d10
data_offset = 41b800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 106f, mft_size = 12d10
data_offset = 41bc00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1070, mft_size = 12d10
data_offset = 41c000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1071, mft_size = 12d10
data_offset = 41c400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1072, mft_size = 12d10
data_offset = 41c800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1073, mft_size = 12d10
data_offset = 41cc00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1074, mft_size = 12d10
data_offset = 41d000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1075, mft_size = 12d10
data_offset = 41d400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1076, mft_size = 12d10
data_offset = 41d800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si

12:31:53 12:31:53 = 4b44000


12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000

Reading MFT entry. number = 1077, mft_size = 12d10


data_offset = 41dc00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1078, mft_size = 12d10
data_offset = 41e000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1079, mft_size = 12d10
data_offset = 41e400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 107a, mft_size = 12d10
data_offset = 41e800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 107b, mft_size = 12d10
data_offset = 41ec00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 107c, mft_size = 12d10
data_offset = 41f000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 107d, mft_size = 12d10
data_offset = 41f400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 107e, mft_size = 12d10
data_offset = 41f800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 107f, mft_size = 12d10
data_offset = 41fc00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1080, mft_size = 12d10
data_offset = 420000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1081, mft_size = 12d10
data_offset = 420400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1082, mft_size = 12d10
data_offset = 420800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si

12:31:53 12:31:53 = 4b44000


12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000

Reading MFT entry. number = 1083, mft_size = 12d10


data_offset = 420c00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1084, mft_size = 12d10
data_offset = 421000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1085, mft_size = 12d10
data_offset = 421400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1086, mft_size = 12d10
data_offset = 421800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1087, mft_size = 12d10
data_offset = 421c00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1088, mft_size = 12d10
data_offset = 422000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1089, mft_size = 12d10
data_offset = 422400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 108a, mft_size = 12d10
data_offset = 422800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 108b, mft_size = 12d10
data_offset = 422c00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 108c, mft_size = 12d10
data_offset = 423000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 108d, mft_size = 12d10
data_offset = 423400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 108e, mft_size = 12d10
data_offset = 423800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si

12:31:53 12:31:53 = 4b44000


12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000

Reading MFT entry. number = 108f, mft_size = 12d10


data_offset = 423c00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1090, mft_size = 12d10
data_offset = 424000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1091, mft_size = 12d10
data_offset = 424400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1092, mft_size = 12d10
data_offset = 424800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1093, mft_size = 12d10
data_offset = 424c00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1094, mft_size = 12d10
data_offset = 425000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1095, mft_size = 12d10
data_offset = 425400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1096, mft_size = 12d10
data_offset = 425800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1097, mft_size = 12d10
data_offset = 425c00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1098, mft_size = 12d10
data_offset = 426000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1099, mft_size = 12d10
data_offset = 426400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 109a, mft_size = 12d10
data_offset = 426800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si

12:31:53 12:31:53 = 4b44000


12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000

Reading MFT entry. number = 109b, mft_size = 12d10


data_offset = 426c00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 109c, mft_size = 12d10
data_offset = 427000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 109d, mft_size = 12d10
data_offset = 427400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 109e, mft_size = 12d10
data_offset = 427800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 109f, mft_size = 12d10
data_offset = 427c00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 10a0, mft_size = 12d10
data_offset = 428000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 10a1, mft_size = 12d10
data_offset = 428400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 10a2, mft_size = 12d10
data_offset = 428800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 10a3, mft_size = 12d10
data_offset = 428c00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 10a4, mft_size = 12d10
data_offset = 429000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 10a5, mft_size = 12d10
data_offset = 429400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 10a6, mft_size = 12d10
data_offset = 429800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si

12:31:53 12:31:53 = 4b44000


12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000

Reading MFT entry. number = 10a7, mft_size = 12d10


data_offset = 429c00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 10a8, mft_size = 12d10
data_offset = 42a000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 10a9, mft_size = 12d10
data_offset = 42a400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 10aa, mft_size = 12d10
data_offset = 42a800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 10ab, mft_size = 12d10
data_offset = 42ac00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 10ac, mft_size = 12d10
data_offset = 42b000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 10ad, mft_size = 12d10
data_offset = 42b400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 10ae, mft_size = 12d10
data_offset = 42b800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 10af, mft_size = 12d10
data_offset = 42bc00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 10b0, mft_size = 12d10
data_offset = 42c000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 10b1, mft_size = 12d10
data_offset = 42c400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 10b2, mft_size = 12d10
data_offset = 42c800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si

12:31:53 12:31:53 = 4b44000


12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000

Reading MFT entry. number = 10b3, mft_size = 12d10


data_offset = 42cc00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 10b4, mft_size = 12d10
data_offset = 42d000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 10b5, mft_size = 12d10
data_offset = 42d400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 10b6, mft_size = 12d10
data_offset = 42d800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 10b7, mft_size = 12d10
data_offset = 42dc00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 10b8, mft_size = 12d10
data_offset = 42e000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 10b9, mft_size = 12d10
data_offset = 42e400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 10ba, mft_size = 12d10
data_offset = 42e800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 10bb, mft_size = 12d10
data_offset = 42ec00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 10bc, mft_size = 12d10
data_offset = 42f000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 10bd, mft_size = 12d10
data_offset = 42f400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 10be, mft_size = 12d10
data_offset = 42f800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si

12:31:53 12:31:53 = 4b44000


12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000

Reading MFT entry. number = 10bf, mft_size = 12d10


data_offset = 42fc00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 10c0, mft_size = 12d10
data_offset = 430000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 10c1, mft_size = 12d10
data_offset = 430400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 10c2, mft_size = 12d10
data_offset = 430800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 10c3, mft_size = 12d10
data_offset = 430c00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 10c4, mft_size = 12d10
data_offset = 431000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 10c5, mft_size = 12d10
data_offset = 431400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 10c6, mft_size = 12d10
data_offset = 431800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 10c7, mft_size = 12d10
data_offset = 431c00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 10c8, mft_size = 12d10
data_offset = 432000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 10c9, mft_size = 12d10
data_offset = 432400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 10ca, mft_size = 12d10
data_offset = 432800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si

12:31:53 12:31:53 = 4b44000


12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000

Reading MFT entry. number = 10cb, mft_size = 12d10


data_offset = 432c00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 10cc, mft_size = 12d10
data_offset = 433000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 10cd, mft_size = 12d10
data_offset = 433400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 10ce, mft_size = 12d10
data_offset = 433800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 10cf, mft_size = 12d10
data_offset = 433c00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 10d0, mft_size = 12d10
data_offset = 434000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 10d1, mft_size = 12d10
data_offset = 434400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 10d2, mft_size = 12d10
data_offset = 434800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 10d3, mft_size = 12d10
data_offset = 434c00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 10d4, mft_size = 12d10
data_offset = 435000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 10d5, mft_size = 12d10
data_offset = 435400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 10d6, mft_size = 12d10
data_offset = 435800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si

12:31:53 12:31:53 = 4b44000


12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000

Reading MFT entry. number = 10d7, mft_size = 12d10


data_offset = 435c00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 10d8, mft_size = 12d10
data_offset = 436000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 10d9, mft_size = 12d10
data_offset = 436400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 10da, mft_size = 12d10
data_offset = 436800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 10db, mft_size = 12d10
data_offset = 436c00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 10dc, mft_size = 12d10
data_offset = 437000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 10dd, mft_size = 12d10
data_offset = 437400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 10de, mft_size = 12d10
data_offset = 437800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 10df, mft_size = 12d10
data_offset = 437c00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 10e0, mft_size = 12d10
data_offset = 438000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 10e1, mft_size = 12d10
data_offset = 438400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 10e2, mft_size = 12d10
data_offset = 438800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si

12:31:53 12:31:53 = 4b44000


12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000

Reading MFT entry. number = 10e3, mft_size = 12d10


data_offset = 438c00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 10e4, mft_size = 12d10
data_offset = 439000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 10e5, mft_size = 12d10
data_offset = 439400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 10e6, mft_size = 12d10
data_offset = 439800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 10e7, mft_size = 12d10
data_offset = 439c00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 10e8, mft_size = 12d10
data_offset = 43a000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 10e9, mft_size = 12d10
data_offset = 43a400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 10ea, mft_size = 12d10
data_offset = 43a800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 10eb, mft_size = 12d10
data_offset = 43ac00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 10ec, mft_size = 12d10
data_offset = 43b000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 10ed, mft_size = 12d10
data_offset = 43b400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 10ee, mft_size = 12d10
data_offset = 43b800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si

12:31:53 12:31:53 = 4b44000


12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000

Reading MFT entry. number = 10ef, mft_size = 12d10


data_offset = 43bc00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 10f0, mft_size = 12d10
data_offset = 43c000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 10f1, mft_size = 12d10
data_offset = 43c400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 10f2, mft_size = 12d10
data_offset = 43c800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 10f3, mft_size = 12d10
data_offset = 43cc00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 10f4, mft_size = 12d10
data_offset = 43d000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 10f5, mft_size = 12d10
data_offset = 43d400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 10f6, mft_size = 12d10
data_offset = 43d800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 10f7, mft_size = 12d10
data_offset = 43dc00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 10f8, mft_size = 12d10
data_offset = 43e000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 10f9, mft_size = 12d10
data_offset = 43e400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 10fa, mft_size = 12d10
data_offset = 43e800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si

12:31:53 12:31:53 = 4b44000


12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000

Reading MFT entry. number = 10fb, mft_size = 12d10


data_offset = 43ec00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 10fc, mft_size = 12d10
data_offset = 43f000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 10fd, mft_size = 12d10
data_offset = 43f400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 10fe, mft_size = 12d10
data_offset = 43f800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 10ff, mft_size = 12d10
data_offset = 43fc00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1100, mft_size = 12d10
data_offset = 440000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1101, mft_size = 12d10
data_offset = 440400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1102, mft_size = 12d10
data_offset = 440800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1103, mft_size = 12d10
data_offset = 440c00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1104, mft_size = 12d10
data_offset = 441000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1105, mft_size = 12d10
data_offset = 441400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1106, mft_size = 12d10
data_offset = 441800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si

12:31:53 12:31:53 = 4b44000


12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000

Reading MFT entry. number = 1107, mft_size = 12d10


data_offset = 441c00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1108, mft_size = 12d10
data_offset = 442000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1109, mft_size = 12d10
data_offset = 442400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 110a, mft_size = 12d10
data_offset = 442800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 110b, mft_size = 12d10
data_offset = 442c00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 110c, mft_size = 12d10
data_offset = 443000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 110d, mft_size = 12d10
data_offset = 443400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 110e, mft_size = 12d10
data_offset = 443800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 110f, mft_size = 12d10
data_offset = 443c00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1110, mft_size = 12d10
data_offset = 444000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1111, mft_size = 12d10
data_offset = 444400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1112, mft_size = 12d10
data_offset = 444800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si

12:31:53 12:31:53 = 4b44000


12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000

Reading MFT entry. number = 1113, mft_size = 12d10


data_offset = 444c00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1114, mft_size = 12d10
data_offset = 445000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1115, mft_size = 12d10
data_offset = 445400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1116, mft_size = 12d10
data_offset = 445800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1117, mft_size = 12d10
data_offset = 445c00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1118, mft_size = 12d10
data_offset = 446000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1119, mft_size = 12d10
data_offset = 446400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 111a, mft_size = 12d10
data_offset = 446800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 111b, mft_size = 12d10
data_offset = 446c00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 111c, mft_size = 12d10
data_offset = 447000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 111d, mft_size = 12d10
data_offset = 447400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 111e, mft_size = 12d10
data_offset = 447800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si

12:31:53 12:31:53 = 4b44000


12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000

Reading MFT entry. number = 111f, mft_size = 12d10


data_offset = 447c00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1120, mft_size = 12d10
data_offset = 448000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1121, mft_size = 12d10
data_offset = 448400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1122, mft_size = 12d10
data_offset = 448800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1123, mft_size = 12d10
data_offset = 448c00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1124, mft_size = 12d10
data_offset = 449000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1125, mft_size = 12d10
data_offset = 449400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1126, mft_size = 12d10
data_offset = 449800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1127, mft_size = 12d10
data_offset = 449c00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1128, mft_size = 12d10
data_offset = 44a000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1129, mft_size = 12d10
data_offset = 44a400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 112a, mft_size = 12d10
data_offset = 44a800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si

12:31:53 12:31:53 = 4b44000


12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000

Reading MFT entry. number = 112b, mft_size = 12d10


data_offset = 44ac00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 112c, mft_size = 12d10
data_offset = 44b000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 112d, mft_size = 12d10
data_offset = 44b400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 112e, mft_size = 12d10
data_offset = 44b800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 112f, mft_size = 12d10
data_offset = 44bc00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1130, mft_size = 12d10
data_offset = 44c000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1131, mft_size = 12d10
data_offset = 44c400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1132, mft_size = 12d10
data_offset = 44c800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1133, mft_size = 12d10
data_offset = 44cc00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1134, mft_size = 12d10
data_offset = 44d000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1135, mft_size = 12d10
data_offset = 44d400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1136, mft_size = 12d10
data_offset = 44d800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si

12:31:53 12:31:53 = 4b44000


12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000

Reading MFT entry. number = 1137, mft_size = 12d10


data_offset = 44dc00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1138, mft_size = 12d10
data_offset = 44e000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1139, mft_size = 12d10
data_offset = 44e400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 113a, mft_size = 12d10
data_offset = 44e800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 113b, mft_size = 12d10
data_offset = 44ec00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 113c, mft_size = 12d10
data_offset = 44f000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 113d, mft_size = 12d10
data_offset = 44f400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 113e, mft_size = 12d10
data_offset = 44f800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 113f, mft_size = 12d10
data_offset = 44fc00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1140, mft_size = 12d10
data_offset = 450000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1141, mft_size = 12d10
data_offset = 450400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1142, mft_size = 12d10
data_offset = 450800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si

12:31:53 12:31:53 = 4b44000


12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000

Reading MFT entry. number = 1143, mft_size = 12d10


data_offset = 450c00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1144, mft_size = 12d10
data_offset = 451000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1145, mft_size = 12d10
data_offset = 451400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1146, mft_size = 12d10
data_offset = 451800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1147, mft_size = 12d10
data_offset = 451c00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1148, mft_size = 12d10
data_offset = 452000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1149, mft_size = 12d10
data_offset = 452400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 114a, mft_size = 12d10
data_offset = 452800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 114b, mft_size = 12d10
data_offset = 452c00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 114c, mft_size = 12d10
data_offset = 453000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 114d, mft_size = 12d10
data_offset = 453400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 114e, mft_size = 12d10
data_offset = 453800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si

12:31:53 12:31:53 = 4b44000


12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:53 12:31:53 = 4b44000
12:31:53 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000

Reading MFT entry. number = 114f, mft_size = 12d10


data_offset = 453c00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1150, mft_size = 12d10
data_offset = 454000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1151, mft_size = 12d10
data_offset = 454400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1152, mft_size = 12d10
data_offset = 454800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1153, mft_size = 12d10
data_offset = 454c00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1154, mft_size = 12d10
data_offset = 455000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1155, mft_size = 12d10
data_offset = 455400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1156, mft_size = 12d10
data_offset = 455800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1157, mft_size = 12d10
data_offset = 455c00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1158, mft_size = 12d10
data_offset = 456000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1159, mft_size = 12d10
data_offset = 456400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 115a, mft_size = 12d10
data_offset = 456800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si

12:31:54 12:31:54 = 4b44000


12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000

Reading MFT entry. number = 115b, mft_size = 12d10


data_offset = 456c00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 115c, mft_size = 12d10
data_offset = 457000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 115d, mft_size = 12d10
data_offset = 457400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 115e, mft_size = 12d10
data_offset = 457800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 115f, mft_size = 12d10
data_offset = 457c00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1160, mft_size = 12d10
data_offset = 458000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1161, mft_size = 12d10
data_offset = 458400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1162, mft_size = 12d10
data_offset = 458800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1163, mft_size = 12d10
data_offset = 458c00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1164, mft_size = 12d10
data_offset = 459000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1165, mft_size = 12d10
data_offset = 459400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1166, mft_size = 12d10
data_offset = 459800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si

12:31:54 12:31:54 = 4b44000


12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000

Reading MFT entry. number = 1167, mft_size = 12d10


data_offset = 459c00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1168, mft_size = 12d10
data_offset = 45a000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1169, mft_size = 12d10
data_offset = 45a400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 116a, mft_size = 12d10
data_offset = 45a800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 116b, mft_size = 12d10
data_offset = 45ac00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 116c, mft_size = 12d10
data_offset = 45b000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 116d, mft_size = 12d10
data_offset = 45b400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 116e, mft_size = 12d10
data_offset = 45b800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 116f, mft_size = 12d10
data_offset = 45bc00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1170, mft_size = 12d10
data_offset = 45c000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1171, mft_size = 12d10
data_offset = 45c400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1172, mft_size = 12d10
data_offset = 45c800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si

12:31:54 12:31:54 = 4b44000


12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000

Reading MFT entry. number = 1173, mft_size = 12d10


data_offset = 45cc00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1174, mft_size = 12d10
data_offset = 45d000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1175, mft_size = 12d10
data_offset = 45d400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1176, mft_size = 12d10
data_offset = 45d800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1177, mft_size = 12d10
data_offset = 45dc00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1178, mft_size = 12d10
data_offset = 45e000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1179, mft_size = 12d10
data_offset = 45e400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 117a, mft_size = 12d10
data_offset = 45e800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 117b, mft_size = 12d10
data_offset = 45ec00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 117c, mft_size = 12d10
data_offset = 45f000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 117d, mft_size = 12d10
data_offset = 45f400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 117e, mft_size = 12d10
data_offset = 45f800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si

12:31:54 12:31:54 = 4b44000


12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000

Reading MFT entry. number = 117f, mft_size = 12d10


data_offset = 45fc00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1180, mft_size = 12d10
data_offset = 460000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1181, mft_size = 12d10
data_offset = 460400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1182, mft_size = 12d10
data_offset = 460800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1183, mft_size = 12d10
data_offset = 460c00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1184, mft_size = 12d10
data_offset = 461000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1185, mft_size = 12d10
data_offset = 461400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1186, mft_size = 12d10
data_offset = 461800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1187, mft_size = 12d10
data_offset = 461c00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1188, mft_size = 12d10
data_offset = 462000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1189, mft_size = 12d10
data_offset = 462400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 118a, mft_size = 12d10
data_offset = 462800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si

12:31:54 12:31:54 = 4b44000


12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 nd
12:31:54 12:31:54 12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 -

Reading MFT entry. number = 118b, mft_size = 12d10


data_offset = 462c00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 118c, mft_size = 12d10
data_offset = 463000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 118d, mft_size = 12d10
data_offset = 463400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 118d
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 118e, mft_size = 12d10
data_offset = 463800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 118f, mft_size = 12d10
data_offset = 463c00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1190, mft_size = 12d10
data_offset = 464000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1191, mft_size = 12d10
data_offset = 464400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1192, mft_size = 12d10
data_offset = 464800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1193, mft_size = 12d10
data_offset = 464c00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1194, mft_size = 12d10
data_offset = 465000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1195, mft_size = 12d10
data_offset = 465400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1196, mft_size = 12d10

12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 -

data_offset = 465800, data_size = 400, file_size


cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1197, mft_size = 12d10
data_offset = 465c00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1198, mft_size = 12d10
data_offset = 466000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1199, mft_size = 12d10
data_offset = 466400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 119a, mft_size = 12d10
data_offset = 466800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 119b, mft_size = 12d10
data_offset = 466c00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 119c, mft_size = 12d10
data_offset = 467000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 119d, mft_size = 12d10
data_offset = 467400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 119e, mft_size = 12d10
data_offset = 467800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 119f, mft_size = 12d10
data_offset = 467c00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 11a0, mft_size = 12d10
data_offset = 468000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 11a1, mft_size = 12d10
data_offset = 468400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 11a2, mft_size = 12d10

12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 -

data_offset = 468800, data_size = 400, file_size


cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 11a3, mft_size = 12d10
data_offset = 468c00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 11a4, mft_size = 12d10
data_offset = 469000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 11a5, mft_size = 12d10
data_offset = 469400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 11a6, mft_size = 12d10
data_offset = 469800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 11a7, mft_size = 12d10
data_offset = 469c00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 11a8, mft_size = 12d10
data_offset = 46a000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 11a9, mft_size = 12d10
data_offset = 46a400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 11aa, mft_size = 12d10
data_offset = 46a800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 11ab, mft_size = 12d10
data_offset = 46ac00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 11ac, mft_size = 12d10
data_offset = 46b000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 11ad, mft_size = 12d10
data_offset = 46b400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 11ae, mft_size = 12d10

12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 -

data_offset = 46b800, data_size = 400, file_size


cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 11af, mft_size = 12d10
data_offset = 46bc00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 11b0, mft_size = 12d10
data_offset = 46c000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 11b1, mft_size = 12d10
data_offset = 46c400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 11b2, mft_size = 12d10
data_offset = 46c800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 11b3, mft_size = 12d10
data_offset = 46cc00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 11b4, mft_size = 12d10
data_offset = 46d000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 11b5, mft_size = 12d10
data_offset = 46d400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 11b6, mft_size = 12d10
data_offset = 46d800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 11b7, mft_size = 12d10
data_offset = 46dc00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 11b8, mft_size = 12d10
data_offset = 46e000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 11b9, mft_size = 12d10
data_offset = 46e400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 11ba, mft_size = 12d10

12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 -

data_offset = 46e800, data_size = 400, file_size


cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 11bb, mft_size = 12d10
data_offset = 46ec00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 11bc, mft_size = 12d10
data_offset = 46f000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 11bd, mft_size = 12d10
data_offset = 46f400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 11be, mft_size = 12d10
data_offset = 46f800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 11bf, mft_size = 12d10
data_offset = 46fc00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 11c0, mft_size = 12d10
data_offset = 470000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 11c1, mft_size = 12d10
data_offset = 470400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 11c2, mft_size = 12d10
data_offset = 470800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 11c3, mft_size = 12d10
data_offset = 470c00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 11c4, mft_size = 12d10
data_offset = 471000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 11c5, mft_size = 12d10
data_offset = 471400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 11c6, mft_size = 12d10

12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 -

data_offset = 471800, data_size = 400, file_size


cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 11c7, mft_size = 12d10
data_offset = 471c00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 11c8, mft_size = 12d10
data_offset = 472000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 11c9, mft_size = 12d10
data_offset = 472400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 11ca, mft_size = 12d10
data_offset = 472800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 11cb, mft_size = 12d10
data_offset = 472c00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 11cc, mft_size = 12d10
data_offset = 473000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 11cd, mft_size = 12d10
data_offset = 473400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 11ce, mft_size = 12d10
data_offset = 473800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 11cf, mft_size = 12d10
data_offset = 473c00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 11d0, mft_size = 12d10
data_offset = 474000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 11d1, mft_size = 12d10
data_offset = 474400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 11d2, mft_size = 12d10

12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 -

data_offset = 474800, data_size = 400, file_size


cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 11d3, mft_size = 12d10
data_offset = 474c00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 11d4, mft_size = 12d10
data_offset = 475000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 11d5, mft_size = 12d10
data_offset = 475400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 11d6, mft_size = 12d10
data_offset = 475800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 11d7, mft_size = 12d10
data_offset = 475c00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 11d8, mft_size = 12d10
data_offset = 476000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 11d9, mft_size = 12d10
data_offset = 476400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 11da, mft_size = 12d10
data_offset = 476800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 11db, mft_size = 12d10
data_offset = 476c00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 11dc, mft_size = 12d10
data_offset = 477000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 11dd, mft_size = 12d10
data_offset = 477400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 11de, mft_size = 12d10

12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 -

data_offset = 477800, data_size = 400, file_size


cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 11df, mft_size = 12d10
data_offset = 477c00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 11e0, mft_size = 12d10
data_offset = 478000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 11e1, mft_size = 12d10
data_offset = 478400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 11e2, mft_size = 12d10
data_offset = 478800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 11e3, mft_size = 12d10
data_offset = 478c00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 11e4, mft_size = 12d10
data_offset = 479000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 11e5, mft_size = 12d10
data_offset = 479400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 11e6, mft_size = 12d10
data_offset = 479800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 11e7, mft_size = 12d10
data_offset = 479c00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 11e8, mft_size = 12d10
data_offset = 47a000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 11e9, mft_size = 12d10
data_offset = 47a400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 11ea, mft_size = 12d10

12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 nd
12:31:54 12:31:54 12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 nd
12:31:54 12:31:54 12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 nd
12:31:54 12:31:54 12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 nd
12:31:54 12:31:54 12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 nd
12:31:54 12:31:54 12:31:54 -

data_offset = 47a800, data_size = 400, file_size


cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 11eb, mft_size = 12d10
data_offset = 47ac00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 11ec, mft_size = 12d10
data_offset = 47b000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 11ec
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 11ed, mft_size = 12d10
data_offset = 47b400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 11ed
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 11ee, mft_size = 12d10
data_offset = 47b800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 11ee
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 11ef, mft_size = 12d10
data_offset = 47bc00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 11ef
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 11f0, mft_size = 12d10
data_offset = 47c000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 11f1, mft_size = 12d10
data_offset = 47c400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 11f1
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 11f2, mft_size = 12d10

12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 -

data_offset = 47c800, data_size = 400, file_size


cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 11f3, mft_size = 12d10
data_offset = 47cc00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 11f4, mft_size = 12d10
data_offset = 47d000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 11f5, mft_size = 12d10
data_offset = 47d400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 11f6, mft_size = 12d10
data_offset = 47d800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 11f7, mft_size = 12d10
data_offset = 47dc00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 11f8, mft_size = 12d10
data_offset = 47e000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 11f9, mft_size = 12d10
data_offset = 47e400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 11fa, mft_size = 12d10
data_offset = 47e800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 11fb, mft_size = 12d10
data_offset = 47ec00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 11fc, mft_size = 12d10
data_offset = 47f000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 11fd, mft_size = 12d10
data_offset = 47f400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 11fe, mft_size = 12d10

12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 nd
12:31:54 12:31:54 12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 nd
12:31:54 12:31:54 12:31:54 12:31:54 = 4b44000

data_offset = 47f800, data_size = 400, file_size


cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 11ff, mft_size = 12d10
data_offset = 47fc00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1200, mft_size = 12d10
data_offset = 480000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1201, mft_size = 12d10
data_offset = 480400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1202, mft_size = 12d10
data_offset = 480800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1203, mft_size = 12d10
data_offset = 480c00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1204, mft_size = 12d10
data_offset = 481000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1205, mft_size = 12d10
data_offset = 481400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1206, mft_size = 12d10
data_offset = 481800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 1206
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 1207, mft_size = 12d10
data_offset = 481c00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 1207
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 1208, mft_size = 12d10
data_offset = 482000, data_size = 400, file_size

12:31:54 ze = 400000
12:31:54 nd
12:31:54 12:31:54 12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 nd
12:31:54 12:31:54 12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 nd
12:31:54 12:31:54 12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 nd
12:31:54 12:31:54 12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 nd
12:31:54 12:31:54 12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000

cache = 1550020, cache_offset = 3ff000, cache_si


CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 1208
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 1209, mft_size = 12d10
data_offset = 482400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 1209
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 120a, mft_size = 12d10
data_offset = 482800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 120a
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 120b, mft_size = 12d10
data_offset = 482c00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 120b
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 120c, mft_size = 12d10
data_offset = 483000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 120d, mft_size = 12d10
data_offset = 483400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 120e, mft_size = 12d10
data_offset = 483800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 120e
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 120f, mft_size = 12d10
data_offset = 483c00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1210, mft_size = 12d10
data_offset = 484000, data_size = 400, file_size

12:31:54 ze = 400000
12:31:54 nd
12:31:54 12:31:54 12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 nd
12:31:54 12:31:54 12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 nd
12:31:54 12:31:54 12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 nd
12:31:54 12:31:54 12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 nd
12:31:54 12:31:54 12:31:54 12:31:54 = 4b44000

cache = 1550020, cache_offset = 3ff000, cache_si


CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 1210
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 1211, mft_size = 12d10
data_offset = 484400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1212, mft_size = 12d10
data_offset = 484800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1213, mft_size = 12d10
data_offset = 484c00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 1213
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 1214, mft_size = 12d10
data_offset = 485000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1215, mft_size = 12d10
data_offset = 485400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 1215
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 1216, mft_size = 12d10
data_offset = 485800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 1216
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 1217, mft_size = 12d10
data_offset = 485c00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 1217
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 1218, mft_size = 12d10
data_offset = 486000, data_size = 400, file_size

12:31:54 ze = 400000
12:31:54 nd
12:31:54 12:31:54 12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 nd
12:31:54 12:31:54 12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 nd
12:31:54 12:31:54 12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 nd
12:31:54 12:31:54 12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 nd
12:31:54 12:31:54 12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000

cache = 1550020, cache_offset = 3ff000, cache_si


CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 1218
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 1219, mft_size = 12d10
data_offset = 486400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 1219
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 121a, mft_size = 12d10
data_offset = 486800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 121b, mft_size = 12d10
data_offset = 486c00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 121c, mft_size = 12d10
data_offset = 487000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 121c
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 121d, mft_size = 12d10
data_offset = 487400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 121d
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 121e, mft_size = 12d10
data_offset = 487800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 121e
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 121f, mft_size = 12d10
data_offset = 487c00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1220, mft_size = 12d10
data_offset = 488000, data_size = 400, file_size

12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 nd
12:31:54 12:31:54 12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 nd
12:31:54 12:31:54 12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 nd
12:31:54 12:31:54 12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 nd
12:31:54 12:31:54 12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 nd
12:31:54 12:31:54 12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 nd
12:31:54 12:31:54 12:31:54 12:31:54 = 4b44000
12:31:54 -

cache = 1550020, cache_offset = 3ff000, cache_si


Reading MFT entry. number = 1221, mft_size = 12d10
data_offset = 488400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 1221
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 1222, mft_size = 12d10
data_offset = 488800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 1222
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 1223, mft_size = 12d10
data_offset = 488c00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 1223
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 1224, mft_size = 12d10
data_offset = 489000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 1224
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 1225, mft_size = 12d10
data_offset = 489400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 1225
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 1226, mft_size = 12d10
data_offset = 489800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 1226
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 1227, mft_size = 12d10
data_offset = 489c00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si

ze = 400000
12:31:54 nd
12:31:54 12:31:54 12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 nd
12:31:54 12:31:54 12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 nd
12:31:54 12:31:54 12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 nd
12:31:54 12:31:54 12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 nd
12:31:54 12:31:54 12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 nd
12:31:54 12:31:54 12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000

CMFTEntry::GetFileName: $FILE_NAME attribute was not fou


CMFTEntry: MFT entry number 1227
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 1228, mft_size = 12d10
data_offset = 48a000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 1228
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 1229, mft_size = 12d10
data_offset = 48a400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 1229
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 122a, mft_size = 12d10
data_offset = 48a800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 122a
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 122b, mft_size = 12d10
data_offset = 48ac00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 122b
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 122c, mft_size = 12d10
data_offset = 48b000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 122d, mft_size = 12d10
data_offset = 48b400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 122d
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 122e, mft_size = 12d10
data_offset = 48b800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si

12:31:54 12:31:54 = 4b44000


12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 nd
12:31:54 12:31:54 12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 nd
12:31:54 12:31:54 12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 nd
12:31:54 12:31:54 12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 nd
12:31:54 12:31:54 12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 nd
12:31:54 12:31:54 12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000

Reading MFT entry. number = 122f, mft_size = 12d10


data_offset = 48bc00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1230, mft_size = 12d10
data_offset = 48c000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 1230
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 1231, mft_size = 12d10
data_offset = 48c400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1232, mft_size = 12d10
data_offset = 48c800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 1232
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 1233, mft_size = 12d10
data_offset = 48cc00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 1233
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 1234, mft_size = 12d10
data_offset = 48d000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 1234
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 1235, mft_size = 12d10
data_offset = 48d400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 1235
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 1236, mft_size = 12d10
data_offset = 48d800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si

12:31:54 nd
12:31:54 12:31:54 12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 nd
12:31:54 12:31:54 12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 nd
12:31:54 12:31:54 12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 nd
12:31:54 12:31:54 12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 nd
12:31:54 12:31:54 12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 nd
12:31:54 12:31:54 12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 -

CMFTEntry::GetFileName: $FILE_NAME attribute was not fou


CMFTEntry: MFT entry number 1236
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 1237, mft_size = 12d10
data_offset = 48dc00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 1237
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 1238, mft_size = 12d10
data_offset = 48e000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 1238
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 1239, mft_size = 12d10
data_offset = 48e400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 1239
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 123a, mft_size = 12d10
data_offset = 48e800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 123a
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 123b, mft_size = 12d10
data_offset = 48ec00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 123c, mft_size = 12d10
data_offset = 48f000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 123c
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 123d, mft_size = 12d10
data_offset = 48f400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 123e, mft_size = 12d10

12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 nd
12:31:54 12:31:54 12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 nd
12:31:54 12:31:54 12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 nd
12:31:54 -

data_offset = 48f800, data_size = 400, file_size


cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 123f, mft_size = 12d10
data_offset = 48fc00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 123f
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 1240, mft_size = 12d10
data_offset = 490000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 1240
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 1241, mft_size = 12d10
data_offset = 490400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1242, mft_size = 12d10
data_offset = 490800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1243, mft_size = 12d10
data_offset = 490c00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1244, mft_size = 12d10
data_offset = 491000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1245, mft_size = 12d10
data_offset = 491400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1246, mft_size = 12d10
data_offset = 491800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1247, mft_size = 12d10
data_offset = 491c00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 1247

12:31:54 12:31:54 12:31:54 = 4b44000


12:31:54 ze = 400000
12:31:54 nd
12:31:54 12:31:54 12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 nd
12:31:54 12:31:54 12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 nd
12:31:54 12:31:54 12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 nd
12:31:54 12:31:54 12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 nd
12:31:54 12:31:54 12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 nd
12:31:54 12:31:54 12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000

CEFSContainer::AddFile: invalid File name. rc = 111


Reading MFT entry. number = 1248, mft_size = 12d10
data_offset = 492000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 1248
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 1249, mft_size = 12d10
data_offset = 492400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 1249
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 124a, mft_size = 12d10
data_offset = 492800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 124a
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 124b, mft_size = 12d10
data_offset = 492c00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 124b
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 124c, mft_size = 12d10
data_offset = 493000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 124c
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 124d, mft_size = 12d10
data_offset = 493400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 124d
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 124e, mft_size = 12d10
data_offset = 493800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si

12:31:54 nd
12:31:54 12:31:54 12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 nd
12:31:54 12:31:54 12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 nd
12:31:54 12:31:54 12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 nd
12:31:54 12:31:54 12:31:54 12:31:54 = 4b44000
12:31:54 -

CMFTEntry::GetFileName: $FILE_NAME attribute was not fou


CMFTEntry: MFT entry number 124e
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 124f, mft_size = 12d10
data_offset = 493c00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1250, mft_size = 12d10
data_offset = 494000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 1250
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 1251, mft_size = 12d10
data_offset = 494400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1252, mft_size = 12d10
data_offset = 494800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1253, mft_size = 12d10
data_offset = 494c00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1254, mft_size = 12d10
data_offset = 495000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1255, mft_size = 12d10
data_offset = 495400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 1255
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 1256, mft_size = 12d10
data_offset = 495800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 1256
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 1257, mft_size = 12d10
data_offset = 495c00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si

ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 nd
12:31:54 12:31:54 12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 nd
12:31:54 12:31:54 12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 nd
12:31:54 12:31:54 12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 nd
12:31:54 12:31:54 12:31:54 12:31:54 = 4b44000

Reading MFT entry. number = 1258, mft_size = 12d10


data_offset = 496000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 1258
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 1259, mft_size = 12d10
data_offset = 496400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 125a, mft_size = 12d10
data_offset = 496800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 125a
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 125b, mft_size = 12d10
data_offset = 496c00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 125c, mft_size = 12d10
data_offset = 497000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 125d, mft_size = 12d10
data_offset = 497400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 125e, mft_size = 12d10
data_offset = 497800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 125e
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 125f, mft_size = 12d10
data_offset = 497c00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 125f
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 1260, mft_size = 12d10
data_offset = 498000, data_size = 400, file_size

12:31:54 ze = 400000
12:31:54 nd
12:31:54 12:31:54 12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 nd
12:31:54 12:31:54 12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 nd
12:31:54 12:31:54 12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 nd
12:31:54 12:31:54 12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 nd
12:31:54 12:31:54 12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 nd
12:31:54 12:31:54 12:31:54 12:31:54 = 4b44000
12:31:54 -

cache = 1550020, cache_offset = 3ff000, cache_si


CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 1260
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 1261, mft_size = 12d10
data_offset = 498400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 1261
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 1262, mft_size = 12d10
data_offset = 498800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 1262
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 1263, mft_size = 12d10
data_offset = 498c00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 1263
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 1264, mft_size = 12d10
data_offset = 499000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 1264
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 1265, mft_size = 12d10
data_offset = 499400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1266, mft_size = 12d10
data_offset = 499800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 1266
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 1267, mft_size = 12d10
data_offset = 499c00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si

ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 nd
12:31:54 12:31:54 12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 nd
12:31:54 12:31:54 12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 nd
12:31:54 12:31:54 12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 nd
12:31:54 12:31:54 12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 nd
12:31:54 12:31:54 12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 nd
12:31:54 12:31:54 -

Reading MFT entry. number = 1268, mft_size = 12d10


data_offset = 49a000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 1268
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 1269, mft_size = 12d10
data_offset = 49a400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 1269
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 126a, mft_size = 12d10
data_offset = 49a800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 126a
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 126b, mft_size = 12d10
data_offset = 49ac00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 126b
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 126c, mft_size = 12d10
data_offset = 49b000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 126c
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 126d, mft_size = 12d10
data_offset = 49b400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 126e, mft_size = 12d10
data_offset = 49b800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 126e
CEFSContainer::AddFile: invalid File name. rc = 111

12:31:54 12:31:54 = 4b44000


12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 nd
12:31:54 12:31:54 12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 nd
12:31:54 12:31:54 12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 nd
12:31:54 12:31:54 12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 nd
12:31:54 12:31:54 12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 -

Reading MFT entry. number = 126f, mft_size = 12d10


data_offset = 49bc00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1270, mft_size = 12d10
data_offset = 49c000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 1270
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 1271, mft_size = 12d10
data_offset = 49c400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1272, mft_size = 12d10
data_offset = 49c800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1273, mft_size = 12d10
data_offset = 49cc00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 1273
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 1274, mft_size = 12d10
data_offset = 49d000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 1274
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 1275, mft_size = 12d10
data_offset = 49d400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 1275
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 1276, mft_size = 12d10
data_offset = 49d800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1277, mft_size = 12d10
data_offset = 49dc00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si

ze = 400000
12:31:54 nd
12:31:54 12:31:54 12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 nd
12:31:54 12:31:54 12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 nd
12:31:54 12:31:54 12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 nd
12:31:54 12:31:54 12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 nd
12:31:54 12:31:54 12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 nd
12:31:54 12:31:54 12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000

CMFTEntry::GetFileName: $FILE_NAME attribute was not fou


CMFTEntry: MFT entry number 1277
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 1278, mft_size = 12d10
data_offset = 49e000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 1278
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 1279, mft_size = 12d10
data_offset = 49e400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 1279
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 127a, mft_size = 12d10
data_offset = 49e800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 127a
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 127b, mft_size = 12d10
data_offset = 49ec00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 127b
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 127c, mft_size = 12d10
data_offset = 49f000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 127c
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 127d, mft_size = 12d10
data_offset = 49f400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 127e, mft_size = 12d10
data_offset = 49f800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si

12:31:54 nd
12:31:54 12:31:54 12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 nd
12:31:54 12:31:54 12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 nd
12:31:54 12:31:54 12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 nd
12:31:54 12:31:54 12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 nd
12:31:54 12:31:54 12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000

CMFTEntry::GetFileName: $FILE_NAME attribute was not fou


CMFTEntry: MFT entry number 127e
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 127f, mft_size = 12d10
data_offset = 49fc00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1280, mft_size = 12d10
data_offset = 4a0000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 1280
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 1281, mft_size = 12d10
data_offset = 4a0400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 1281
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 1282, mft_size = 12d10
data_offset = 4a0800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 1282
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 1283, mft_size = 12d10
data_offset = 4a0c00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 1283
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 1284, mft_size = 12d10
data_offset = 4a1000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1285, mft_size = 12d10
data_offset = 4a1400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1286, mft_size = 12d10
data_offset = 4a1800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si

12:31:54 12:31:54 = 4b44000


12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000

Reading MFT entry. number = 1287, mft_size = 12d10


data_offset = 4a1c00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1288, mft_size = 12d10
data_offset = 4a2000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1289, mft_size = 12d10
data_offset = 4a2400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 128a, mft_size = 12d10
data_offset = 4a2800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 128b, mft_size = 12d10
data_offset = 4a2c00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 128c, mft_size = 12d10
data_offset = 4a3000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 128d, mft_size = 12d10
data_offset = 4a3400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 128e, mft_size = 12d10
data_offset = 4a3800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 128f, mft_size = 12d10
data_offset = 4a3c00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1290, mft_size = 12d10
data_offset = 4a4000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1291, mft_size = 12d10
data_offset = 4a4400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1292, mft_size = 12d10
data_offset = 4a4800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si

12:31:54 12:31:54 = 4b44000


12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000

Reading MFT entry. number = 1293, mft_size = 12d10


data_offset = 4a4c00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1294, mft_size = 12d10
data_offset = 4a5000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1295, mft_size = 12d10
data_offset = 4a5400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1296, mft_size = 12d10
data_offset = 4a5800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1297, mft_size = 12d10
data_offset = 4a5c00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1298, mft_size = 12d10
data_offset = 4a6000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1299, mft_size = 12d10
data_offset = 4a6400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 129a, mft_size = 12d10
data_offset = 4a6800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 129b, mft_size = 12d10
data_offset = 4a6c00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 129c, mft_size = 12d10
data_offset = 4a7000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 129d, mft_size = 12d10
data_offset = 4a7400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 129e, mft_size = 12d10
data_offset = 4a7800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si

12:31:54 12:31:54 = 4b44000


12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000

Reading MFT entry. number = 129f, mft_size = 12d10


data_offset = 4a7c00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 12a0, mft_size = 12d10
data_offset = 4a8000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 12a1, mft_size = 12d10
data_offset = 4a8400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 12a2, mft_size = 12d10
data_offset = 4a8800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 12a3, mft_size = 12d10
data_offset = 4a8c00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 12a4, mft_size = 12d10
data_offset = 4a9000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 12a5, mft_size = 12d10
data_offset = 4a9400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 12a6, mft_size = 12d10
data_offset = 4a9800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 12a7, mft_size = 12d10
data_offset = 4a9c00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 12a8, mft_size = 12d10
data_offset = 4aa000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 12a9, mft_size = 12d10
data_offset = 4aa400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 12aa, mft_size = 12d10
data_offset = 4aa800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si

12:31:54 12:31:54 = 4b44000


12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000

Reading MFT entry. number = 12ab, mft_size = 12d10


data_offset = 4aac00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 12ac, mft_size = 12d10
data_offset = 4ab000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 12ad, mft_size = 12d10
data_offset = 4ab400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 12ae, mft_size = 12d10
data_offset = 4ab800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 12af, mft_size = 12d10
data_offset = 4abc00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 12b0, mft_size = 12d10
data_offset = 4ac000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 12b1, mft_size = 12d10
data_offset = 4ac400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 12b2, mft_size = 12d10
data_offset = 4ac800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 12b3, mft_size = 12d10
data_offset = 4acc00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 12b4, mft_size = 12d10
data_offset = 4ad000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 12b5, mft_size = 12d10
data_offset = 4ad400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 12b6, mft_size = 12d10
data_offset = 4ad800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si

12:31:54 12:31:54 = 4b44000


12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000

Reading MFT entry. number = 12b7, mft_size = 12d10


data_offset = 4adc00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 12b8, mft_size = 12d10
data_offset = 4ae000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 12b9, mft_size = 12d10
data_offset = 4ae400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 12ba, mft_size = 12d10
data_offset = 4ae800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 12bb, mft_size = 12d10
data_offset = 4aec00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 12bc, mft_size = 12d10
data_offset = 4af000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 12bd, mft_size = 12d10
data_offset = 4af400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 12be, mft_size = 12d10
data_offset = 4af800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 12bf, mft_size = 12d10
data_offset = 4afc00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 12c0, mft_size = 12d10
data_offset = 4b0000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 12c1, mft_size = 12d10
data_offset = 4b0400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 12c2, mft_size = 12d10
data_offset = 4b0800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si

12:31:54 12:31:54 = 4b44000


12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000

Reading MFT entry. number = 12c3, mft_size = 12d10


data_offset = 4b0c00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 12c4, mft_size = 12d10
data_offset = 4b1000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 12c5, mft_size = 12d10
data_offset = 4b1400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 12c6, mft_size = 12d10
data_offset = 4b1800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 12c7, mft_size = 12d10
data_offset = 4b1c00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 12c8, mft_size = 12d10
data_offset = 4b2000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 12c9, mft_size = 12d10
data_offset = 4b2400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 12ca, mft_size = 12d10
data_offset = 4b2800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 12cb, mft_size = 12d10
data_offset = 4b2c00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 12cc, mft_size = 12d10
data_offset = 4b3000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 12cd, mft_size = 12d10
data_offset = 4b3400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 12ce, mft_size = 12d10
data_offset = 4b3800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si

12:31:54 12:31:54 = 4b44000


12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000

Reading MFT entry. number = 12cf, mft_size = 12d10


data_offset = 4b3c00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 12d0, mft_size = 12d10
data_offset = 4b4000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 12d1, mft_size = 12d10
data_offset = 4b4400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 12d2, mft_size = 12d10
data_offset = 4b4800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 12d3, mft_size = 12d10
data_offset = 4b4c00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 12d4, mft_size = 12d10
data_offset = 4b5000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 12d5, mft_size = 12d10
data_offset = 4b5400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 12d6, mft_size = 12d10
data_offset = 4b5800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 12d7, mft_size = 12d10
data_offset = 4b5c00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 12d8, mft_size = 12d10
data_offset = 4b6000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 12d9, mft_size = 12d10
data_offset = 4b6400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 12da, mft_size = 12d10
data_offset = 4b6800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si

12:31:54 12:31:54 = 4b44000


12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 nd
12:31:54 12:31:54 12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 nd
12:31:54 12:31:54 12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 nd
12:31:54 12:31:54 12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 nd
12:31:54 12:31:54 12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 nd
12:31:54 12:31:54 12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000

Reading MFT entry. number = 12db, mft_size = 12d10


data_offset = 4b6c00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 12dc, mft_size = 12d10
data_offset = 4b7000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 12dd, mft_size = 12d10
data_offset = 4b7400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 12dd
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 12de, mft_size = 12d10
data_offset = 4b7800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 12de
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 12df, mft_size = 12d10
data_offset = 4b7c00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 12df
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 12e0, mft_size = 12d10
data_offset = 4b8000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 12e0
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 12e1, mft_size = 12d10
data_offset = 4b8400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 12e1
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 12e2, mft_size = 12d10
data_offset = 4b8800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si

12:31:54 nd
12:31:54 12:31:54 12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 nd
12:31:54 12:31:54 12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 nd
12:31:54 12:31:54 12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 nd
12:31:54 12:31:54 12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 -

CMFTEntry::GetFileName: $FILE_NAME attribute was not fou


CMFTEntry: MFT entry number 12e2
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 12e3, mft_size = 12d10
data_offset = 4b8c00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 12e3
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 12e4, mft_size = 12d10
data_offset = 4b9000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 12e4
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 12e5, mft_size = 12d10
data_offset = 4b9400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 12e6, mft_size = 12d10
data_offset = 4b9800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 12e7, mft_size = 12d10
data_offset = 4b9c00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
CMFTEntry::GetFileName: $FILE_NAME attribute was not fou
CMFTEntry: MFT entry number 12e7
CEFSContainer::AddFile: invalid File name. rc = 111
Reading MFT entry. number = 12e8, mft_size = 12d10
data_offset = 4ba000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 12e9, mft_size = 12d10
data_offset = 4ba400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 12ea, mft_size = 12d10
data_offset = 4ba800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 12eb, mft_size = 12d10
data_offset = 4bac00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si

ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 -

Reading MFT entry. number = 12ec, mft_size = 12d10


data_offset = 4bb000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 12ed, mft_size = 12d10
data_offset = 4bb400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 12ee, mft_size = 12d10
data_offset = 4bb800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 12ef, mft_size = 12d10
data_offset = 4bbc00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 12f0, mft_size = 12d10
data_offset = 4bc000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 12f1, mft_size = 12d10
data_offset = 4bc400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 12f2, mft_size = 12d10
data_offset = 4bc800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 12f3, mft_size = 12d10
data_offset = 4bcc00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 12f4, mft_size = 12d10
data_offset = 4bd000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 12f5, mft_size = 12d10
data_offset = 4bd400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 12f6, mft_size = 12d10
data_offset = 4bd800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 12f7, mft_size = 12d10
data_offset = 4bdc00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si

ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 -

Reading MFT entry. number = 12f8, mft_size = 12d10


data_offset = 4be000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 12f9, mft_size = 12d10
data_offset = 4be400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 12fa, mft_size = 12d10
data_offset = 4be800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 12fb, mft_size = 12d10
data_offset = 4bec00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 12fc, mft_size = 12d10
data_offset = 4bf000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 12fd, mft_size = 12d10
data_offset = 4bf400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 12fe, mft_size = 12d10
data_offset = 4bf800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 12ff, mft_size = 12d10
data_offset = 4bfc00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1300, mft_size = 12d10
data_offset = 4c0000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1301, mft_size = 12d10
data_offset = 4c0400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1302, mft_size = 12d10
data_offset = 4c0800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1303, mft_size = 12d10
data_offset = 4c0c00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si

ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 -

Reading MFT entry. number = 1304, mft_size = 12d10


data_offset = 4c1000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1305, mft_size = 12d10
data_offset = 4c1400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1306, mft_size = 12d10
data_offset = 4c1800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1307, mft_size = 12d10
data_offset = 4c1c00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1308, mft_size = 12d10
data_offset = 4c2000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1309, mft_size = 12d10
data_offset = 4c2400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 130a, mft_size = 12d10
data_offset = 4c2800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 130b, mft_size = 12d10
data_offset = 4c2c00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 130c, mft_size = 12d10
data_offset = 4c3000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 130d, mft_size = 12d10
data_offset = 4c3400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 130e, mft_size = 12d10
data_offset = 4c3800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 130f, mft_size = 12d10
data_offset = 4c3c00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si

ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 -

Reading MFT entry. number = 1310, mft_size = 12d10


data_offset = 4c4000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1311, mft_size = 12d10
data_offset = 4c4400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1312, mft_size = 12d10
data_offset = 4c4800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1313, mft_size = 12d10
data_offset = 4c4c00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1314, mft_size = 12d10
data_offset = 4c5000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1315, mft_size = 12d10
data_offset = 4c5400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1316, mft_size = 12d10
data_offset = 4c5800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1317, mft_size = 12d10
data_offset = 4c5c00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1318, mft_size = 12d10
data_offset = 4c6000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1319, mft_size = 12d10
data_offset = 4c6400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 131a, mft_size = 12d10
data_offset = 4c6800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 131b, mft_size = 12d10
data_offset = 4c6c00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si

ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 -

Reading MFT entry. number = 131c, mft_size = 12d10


data_offset = 4c7000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 131d, mft_size = 12d10
data_offset = 4c7400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 131e, mft_size = 12d10
data_offset = 4c7800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 131f, mft_size = 12d10
data_offset = 4c7c00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1320, mft_size = 12d10
data_offset = 4c8000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1321, mft_size = 12d10
data_offset = 4c8400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1322, mft_size = 12d10
data_offset = 4c8800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1323, mft_size = 12d10
data_offset = 4c8c00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1324, mft_size = 12d10
data_offset = 4c9000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1325, mft_size = 12d10
data_offset = 4c9400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1326, mft_size = 12d10
data_offset = 4c9800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1327, mft_size = 12d10
data_offset = 4c9c00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si

ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 -

Reading MFT entry. number = 1328, mft_size = 12d10


data_offset = 4ca000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1329, mft_size = 12d10
data_offset = 4ca400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 132a, mft_size = 12d10
data_offset = 4ca800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 132b, mft_size = 12d10
data_offset = 4cac00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 132c, mft_size = 12d10
data_offset = 4cb000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 132d, mft_size = 12d10
data_offset = 4cb400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 132e, mft_size = 12d10
data_offset = 4cb800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 132f, mft_size = 12d10
data_offset = 4cbc00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1330, mft_size = 12d10
data_offset = 4cc000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1331, mft_size = 12d10
data_offset = 4cc400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1332, mft_size = 12d10
data_offset = 4cc800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1333, mft_size = 12d10
data_offset = 4ccc00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si

ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 -

Reading MFT entry. number = 1334, mft_size = 12d10


data_offset = 4cd000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1335, mft_size = 12d10
data_offset = 4cd400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1336, mft_size = 12d10
data_offset = 4cd800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1337, mft_size = 12d10
data_offset = 4cdc00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1338, mft_size = 12d10
data_offset = 4ce000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1339, mft_size = 12d10
data_offset = 4ce400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 133a, mft_size = 12d10
data_offset = 4ce800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 133b, mft_size = 12d10
data_offset = 4cec00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 133c, mft_size = 12d10
data_offset = 4cf000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 133d, mft_size = 12d10
data_offset = 4cf400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 133e, mft_size = 12d10
data_offset = 4cf800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 133f, mft_size = 12d10
data_offset = 4cfc00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si

ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 -

Reading MFT entry. number = 1340, mft_size = 12d10


data_offset = 4d0000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1341, mft_size = 12d10
data_offset = 4d0400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1342, mft_size = 12d10
data_offset = 4d0800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1343, mft_size = 12d10
data_offset = 4d0c00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1344, mft_size = 12d10
data_offset = 4d1000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1345, mft_size = 12d10
data_offset = 4d1400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1346, mft_size = 12d10
data_offset = 4d1800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1347, mft_size = 12d10
data_offset = 4d1c00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1348, mft_size = 12d10
data_offset = 4d2000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1349, mft_size = 12d10
data_offset = 4d2400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 134a, mft_size = 12d10
data_offset = 4d2800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 134b, mft_size = 12d10
data_offset = 4d2c00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si

ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 -

Reading MFT entry. number = 134c, mft_size = 12d10


data_offset = 4d3000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 134d, mft_size = 12d10
data_offset = 4d3400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 134e, mft_size = 12d10
data_offset = 4d3800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 134f, mft_size = 12d10
data_offset = 4d3c00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1350, mft_size = 12d10
data_offset = 4d4000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1351, mft_size = 12d10
data_offset = 4d4400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1352, mft_size = 12d10
data_offset = 4d4800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1353, mft_size = 12d10
data_offset = 4d4c00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1354, mft_size = 12d10
data_offset = 4d5000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1355, mft_size = 12d10
data_offset = 4d5400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1356, mft_size = 12d10
data_offset = 4d5800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1357, mft_size = 12d10
data_offset = 4d5c00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si

ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 -

Reading MFT entry. number = 1358, mft_size = 12d10


data_offset = 4d6000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1359, mft_size = 12d10
data_offset = 4d6400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 135a, mft_size = 12d10
data_offset = 4d6800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 135b, mft_size = 12d10
data_offset = 4d6c00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 135c, mft_size = 12d10
data_offset = 4d7000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 135d, mft_size = 12d10
data_offset = 4d7400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 135e, mft_size = 12d10
data_offset = 4d7800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 135f, mft_size = 12d10
data_offset = 4d7c00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1360, mft_size = 12d10
data_offset = 4d8000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1361, mft_size = 12d10
data_offset = 4d8400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1362, mft_size = 12d10
data_offset = 4d8800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1363, mft_size = 12d10
data_offset = 4d8c00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si

ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 -

Reading MFT entry. number = 1364, mft_size = 12d10


data_offset = 4d9000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1365, mft_size = 12d10
data_offset = 4d9400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1366, mft_size = 12d10
data_offset = 4d9800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1367, mft_size = 12d10
data_offset = 4d9c00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1368, mft_size = 12d10
data_offset = 4da000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1369, mft_size = 12d10
data_offset = 4da400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 136a, mft_size = 12d10
data_offset = 4da800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 136b, mft_size = 12d10
data_offset = 4dac00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 136c, mft_size = 12d10
data_offset = 4db000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 136d, mft_size = 12d10
data_offset = 4db400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 136e, mft_size = 12d10
data_offset = 4db800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 136f, mft_size = 12d10
data_offset = 4dbc00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si

ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 -

Reading MFT entry. number = 1370, mft_size = 12d10


data_offset = 4dc000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1371, mft_size = 12d10
data_offset = 4dc400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1372, mft_size = 12d10
data_offset = 4dc800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1373, mft_size = 12d10
data_offset = 4dcc00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1374, mft_size = 12d10
data_offset = 4dd000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1375, mft_size = 12d10
data_offset = 4dd400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1376, mft_size = 12d10
data_offset = 4dd800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1377, mft_size = 12d10
data_offset = 4ddc00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1378, mft_size = 12d10
data_offset = 4de000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1379, mft_size = 12d10
data_offset = 4de400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 137a, mft_size = 12d10
data_offset = 4de800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 137b, mft_size = 12d10
data_offset = 4dec00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si

ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 -

Reading MFT entry. number = 137c, mft_size = 12d10


data_offset = 4df000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 137d, mft_size = 12d10
data_offset = 4df400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 137e, mft_size = 12d10
data_offset = 4df800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 137f, mft_size = 12d10
data_offset = 4dfc00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1380, mft_size = 12d10
data_offset = 4e0000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1381, mft_size = 12d10
data_offset = 4e0400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1382, mft_size = 12d10
data_offset = 4e0800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1383, mft_size = 12d10
data_offset = 4e0c00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1384, mft_size = 12d10
data_offset = 4e1000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1385, mft_size = 12d10
data_offset = 4e1400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1386, mft_size = 12d10
data_offset = 4e1800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1387, mft_size = 12d10
data_offset = 4e1c00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si

ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 -

Reading MFT entry. number = 1388, mft_size = 12d10


data_offset = 4e2000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1389, mft_size = 12d10
data_offset = 4e2400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 138a, mft_size = 12d10
data_offset = 4e2800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 138b, mft_size = 12d10
data_offset = 4e2c00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 138c, mft_size = 12d10
data_offset = 4e3000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 138d, mft_size = 12d10
data_offset = 4e3400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 138e, mft_size = 12d10
data_offset = 4e3800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 138f, mft_size = 12d10
data_offset = 4e3c00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1390, mft_size = 12d10
data_offset = 4e4000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1391, mft_size = 12d10
data_offset = 4e4400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1392, mft_size = 12d10
data_offset = 4e4800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1393, mft_size = 12d10
data_offset = 4e4c00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si

ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 -

Reading MFT entry. number = 1394, mft_size = 12d10


data_offset = 4e5000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1395, mft_size = 12d10
data_offset = 4e5400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1396, mft_size = 12d10
data_offset = 4e5800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1397, mft_size = 12d10
data_offset = 4e5c00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1398, mft_size = 12d10
data_offset = 4e6000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 1399, mft_size = 12d10
data_offset = 4e6400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 139a, mft_size = 12d10
data_offset = 4e6800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 139b, mft_size = 12d10
data_offset = 4e6c00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 139c, mft_size = 12d10
data_offset = 4e7000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 139d, mft_size = 12d10
data_offset = 4e7400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 139e, mft_size = 12d10
data_offset = 4e7800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 139f, mft_size = 12d10
data_offset = 4e7c00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si

ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 -

Reading MFT entry. number = 13a0, mft_size = 12d10


data_offset = 4e8000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 13a1, mft_size = 12d10
data_offset = 4e8400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 13a2, mft_size = 12d10
data_offset = 4e8800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 13a3, mft_size = 12d10
data_offset = 4e8c00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 13a4, mft_size = 12d10
data_offset = 4e9000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 13a5, mft_size = 12d10
data_offset = 4e9400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 13a6, mft_size = 12d10
data_offset = 4e9800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 13a7, mft_size = 12d10
data_offset = 4e9c00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 13a8, mft_size = 12d10
data_offset = 4ea000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 13a9, mft_size = 12d10
data_offset = 4ea400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 13aa, mft_size = 12d10
data_offset = 4ea800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 13ab, mft_size = 12d10
data_offset = 4eac00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si

ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 -

Reading MFT entry. number = 13ac, mft_size = 12d10


data_offset = 4eb000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 13ad, mft_size = 12d10
data_offset = 4eb400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 13ae, mft_size = 12d10
data_offset = 4eb800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 13af, mft_size = 12d10
data_offset = 4ebc00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 13b0, mft_size = 12d10
data_offset = 4ec000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 13b1, mft_size = 12d10
data_offset = 4ec400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 13b2, mft_size = 12d10
data_offset = 4ec800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 13b3, mft_size = 12d10
data_offset = 4ecc00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 13b4, mft_size = 12d10
data_offset = 4ed000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 13b5, mft_size = 12d10
data_offset = 4ed400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 13b6, mft_size = 12d10
data_offset = 4ed800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 13b7, mft_size = 12d10
data_offset = 4edc00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si

ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 -

Reading MFT entry. number = 13b8, mft_size = 12d10


data_offset = 4ee000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 13b9, mft_size = 12d10
data_offset = 4ee400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 13ba, mft_size = 12d10
data_offset = 4ee800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 13bb, mft_size = 12d10
data_offset = 4eec00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 13bc, mft_size = 12d10
data_offset = 4ef000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 13bd, mft_size = 12d10
data_offset = 4ef400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 13be, mft_size = 12d10
data_offset = 4ef800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 13bf, mft_size = 12d10
data_offset = 4efc00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 13c0, mft_size = 12d10
data_offset = 4f0000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 13c1, mft_size = 12d10
data_offset = 4f0400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 13c2, mft_size = 12d10
data_offset = 4f0800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 13c3, mft_size = 12d10
data_offset = 4f0c00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si

ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 ze = 400000
12:31:54 12:31:54 = 4b44000
12:31:54 -

Reading MFT entry. number = 13c4, mft_size = 12d10


data_offset = 4f1000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 13c5, mft_size = 12d10
data_offset = 4f1400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 13c6, mft_size = 12d10
data_offset = 4f1800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 13c7, mft_size = 12d10
data_offset = 4f1c00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 13c8, mft_size = 12d10
data_offset = 4f2000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 13c9, mft_size = 12d10
data_offset = 4f2400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 13ca, mft_size = 12d10
data_offset = 4f2800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 13cb, mft_size = 12d10
data_offset = 4f2c00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 13cc, mft_size = 12d10
data_offset = 4f3000, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 13cd, mft_size = 12d10
data_offset = 4f3400, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 13ce, mft_size = 12d10
data_offset = 4f3800, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si
Reading MFT entry. number = 13cf, mft_size = 12d10
data_offset = 4f3c00, data_size = 400, file_size
cache = 1550020, cache_offset = 3ff000, cache_si

ze = 400000
12:31:54 Reading MFT entry. number = 13d0, mft_size = 12d10
12:31:54 data_offset = 4f4000, data_size = 400, file_size
= 4b44000
12:31:54 cache = 1550020, cache_offset = 3ff000, cache_si
ze = 400000
12:31:54 Reading MFT entry. number = 13d1, mft_size = 12d10
12:31:54 data_offset = 4f4400, data_size = 400, file_size
= 4b44000
12:31:54 cache = 1550020, cache_offset = 3ff000, cache_si
ze = 400000
12:31:54 Reading MFT entry. number = 13d2, mft_size = 12d10
12:31:54 data_offset = 4f4800, data_size = 400, file_size
= 4b44000
12:31:54 cache = 1550020, cache_offset = 3ff000, cache_si
ze = 400000
12:31:54 Reading MFT entry. number = 13d3, mft_size = 12d10
12:31:54 data_offset = 4f4c00, data_size = 400, file_size
= 4b44000
12:31:54 cache = 1550020, cache_offset = 3ff000, cache_si
ze = 400000
12:31:54 Reading MFT entry. number = 13d4, mft_size = 12d10
12:31:54 data_offset = 4f5000, data_size = 400, file_size
= 4b44000
12:31:54 cache = 1550020, cache_offset = 3ff000, cache_si
ze = 400000
12:31:54 Reading MFT entry. number = 13d5, mft_size = 12d10
12:31:54 data_offset = 4f5400, data_size = 400, file_size
= 4b44000
12:31:54 cache = 1550020, cache_offset = 3ff000, cache_si
ze = 400000
12:31:54 Reading MFT entry. number = 13d6, mft_size = 12d10
12:31:54 data_offset = 4f5800, data_size = 400, file_size
= 4b44000
12:31:54 cache = 1550020, cache_offset = 3ff000, cache_si
ze = 400000
12:31:54 Closing logical disk C:
12:31:54 CEFSContainer::ProcessDisk: break flag was activated
12:31:54 - Scanning of logical disk C: was completed
12:31:57 - AEFSDR Wizard stopped
12:32:17 - Debug mode disabled.
12:32:19 - Adding all NTFS drives into the folder tree
*** Log file limit reached! Closing log file.

You might also like